SecureTransport: failure to recognize/handle renegotiation

After the initial handshake is complete, our connection is considered to be encrypted. Then we send an HTTP request. Apparently we have a server that requires a client's certificate when we are trying to access some restricted resource. So SSLRead instead of reading for us some data starts a renegotiation (re-handshake) and the session switches from kSSLConnected to kSSLHandshake. The result code that we have back from this SSLRead is not the expected errSSLWouldBlock but errSSLClientCertRequested instead and here we fail to handle the renegotiation correctly.

Also it appears that any renegotiation attempt (even without a client certificate request) is failing.

As a reproducer - a simple Qt-based client app + openssl s_server and its command 'R' (after the client connected) can be used. 'R' renegotiates TLS session and also requests a client certificate (edit: 'r' will trigger the same behavior).