be consistent in reporting the read epoch
diff --git a/include/picotls.h b/include/picotls.h
index 972bc9d..e63355a 100644
--- a/include/picotls.h
+++ b/include/picotls.h
@@ -1630,7 +1630,7 @@
static size_t ptls_aead_decrypt(ptls_aead_context_t *ctx, void *output, const void *input, size_t inlen, uint64_t seq,
const void *aad, size_t aadlen);
/**
- * Return the current read epoch.
+ * Return the current read epoch (i.e., that of the message being received or to be)
*/
size_t ptls_get_read_epoch(ptls_t *tls);
/**
diff --git a/lib/picotls.c b/lib/picotls.c
index 9716876..66e2dd7 100644
--- a/lib/picotls.c
+++ b/lib/picotls.c
@@ -6245,6 +6245,7 @@
case PTLS_STATE_CLIENT_EXPECT_CERTIFICATE:
case PTLS_STATE_CLIENT_EXPECT_CERTIFICATE_VERIFY:
case PTLS_STATE_CLIENT_EXPECT_FINISHED:
+ case PTLS_STATE_SERVER_GENERATING_CERTIFICATE_VERIFY:
case PTLS_STATE_SERVER_EXPECT_CERTIFICATE:
case PTLS_STATE_SERVER_EXPECT_CERTIFICATE_VERIFY:
case PTLS_STATE_SERVER_EXPECT_FINISHED:
