8130864: Better server identity handling

Reviewed-by: jnimeh, asmotrak, ahgross

src/share/classes/sun/security/ssl/ClientHandshaker.java

@@ -620,6 +620,9 @@ final class ClientHandshaker extends Handshaker {
                 }
             } else {
                 // we wanted to resume, but the server refused
+                //
+                // Invalidate the session in case of reusing next time.
+                session.invalidate();
                 session = null;
                 if (!enableNewSession) {
                     throw new SSLException("New session creation is disabled");