mbedtls
mbedtls copied to clipboard
tls13-prototype non PSA for client
Notes:
Add non-PSA crypto support for the client when it uses TLS 1.3.
* Update include/mbedtls/check_config.h to allow
MBEDTLS_SSL_PROTO_TLS1_3 without MBEDTLS_PSA_CRYPTO_C
* Add non-PSA crypto support in TLS 1.3 implementation.
* Require MBEDTLS_USE_PSA_CRYPTO for the TLS 1.3: Client authentication, rsa_pss_rsae tests. It is because the padding is set to PSA_ALG_RSA_PSS in mbedtls_pk_sign_ext
which is only for MBEDTLS_USE_PSA_CRYPTO.
Status
READY/IN DEVELOPMENT/HOLD
Requires Backporting
When there is a bug fix, it should be backported to all maintained and supported branches. Changes do not have to be backported if:
- This PR is a new feature\enhancement
- This PR contains changes in the API. If this is true, and there is a need for the fix to be backported, the fix should be handled differently in the legacy branch
Yes | NO
Which branch?
Migrations
If there is any API change, what's the incentive and logic for it.
YES | NO
Additional comments
Any additional information that could be of interest
Todos
- [ ] Tests
tests/ssl-opt.sh -p -s -f "TLS 1.3: "
- [ ] Documentation
- [ ] Changelog updated
- [ ] Backported
Steps to test or reproduce
Outline the steps to test or reproduce the PR here.