Overall this method looks like a wrapper around several different OpenSSL APIs.  I'd prefer to expose `session_reused`, `get_finished`, and `get_peer_finished` individually and let applications build this kind of higher-level logic themselves.