mbedtls icon indicating copy to clipboard operation
mbedtls copied to clipboard

tls13-prototype non PSA for client

Open lhuang04 opened this issue 2 years ago • 0 comments

Notes: Add non-PSA crypto support for the client when it uses TLS 1.3. * Update include/mbedtls/check_config.h to allow MBEDTLS_SSL_PROTO_TLS1_3 without MBEDTLS_PSA_CRYPTO_C * Add non-PSA crypto support in TLS 1.3 implementation. * Require MBEDTLS_USE_PSA_CRYPTO for the TLS 1.3: Client authentication, rsa_pss_rsae tests. It is because the padding is set to PSA_ALG_RSA_PSS in mbedtls_pk_sign_ext which is only for MBEDTLS_USE_PSA_CRYPTO.

Status

READY/IN DEVELOPMENT/HOLD

Requires Backporting

When there is a bug fix, it should be backported to all maintained and supported branches. Changes do not have to be backported if:

  • This PR is a new feature\enhancement
  • This PR contains changes in the API. If this is true, and there is a need for the fix to be backported, the fix should be handled differently in the legacy branch

Yes | NO
Which branch?

Migrations

If there is any API change, what's the incentive and logic for it.

YES | NO

Additional comments

Any additional information that could be of interest

Todos

  • [ ] Tests
    tests/ssl-opt.sh -p -s -f "TLS 1.3: "
    
  • [ ] Documentation
  • [ ] Changelog updated
  • [ ] Backported

Steps to test or reproduce

Outline the steps to test or reproduce the PR here.

lhuang04 avatar Sep 07 '22 15:09 lhuang04