espressif/mbedtls
1
0
Fork 0
mirror of https://github.com/espressif/mbedtls.git synced 2026-10-11 11:37:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

ssl: accept TLS 1.2 rsa_pss_rsae in client SKE

Browse Source 
Fix a TLS 1.2 client regression that caused valid ServerKeyExchange signatures using rsa_pss_rsae_* to be rejected.

Allow rsa_pss_rsae_* in the TLS 1.2 client ServerKeyExchange parse path when the algorithm is supported and was offered by the client. Add OpenSSL and GnuTLS interoperability coverage for TLS 1.2 servers that force rsa_pss_rsae_sha256.

Fixes #10668.

Signed-off-by: Viktor Sokolovskiy <[email protected]>
This commit is contained in:
Viktor Sokolovskiy
2026-04-28 14:02:54 +08:00
committed by Ashish Sharma
parent 5ec9b573a3
commit 08a217c560
3 changed files with 97 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/fix-tls12-rsa-pss-sigalgs.txt
+4
View File
@@ -0,0 +1,4 @@
Bugfix
* Fix a TLS 1.2 regression that caused clients to reject valid
ServerKeyExchange signatures using RSA-PSS signature algorithms.
Fixes #10668.