Viktor Sokolovskiy 08a217c560 ssl: accept TLS 1.2 rsa_pss_rsae in client SKE ...

Fix a TLS 1.2 client regression that caused valid ServerKeyExchange signatures using rsa_pss_rsae_* to be rejected.

Allow rsa_pss_rsae_* in the TLS 1.2 client ServerKeyExchange parse path when the algorithm is supported and was offered by the client. Add OpenSSL and GnuTLS interoperability coverage for TLS 1.2 servers that force rsa_pss_rsae_sha256.

Fixes #10668.

Signed-off-by: Viktor Sokolovskiy <maokaman@gmail.com>

2026-04-28 14:02:54 +08:00

..

.jenkins

…

configs

Remove deprecated items

2025-08-01 11:45:14 +01:00

git-scripts

…

include

Fix dependencies

2026-03-16 12:28:36 +00:00

opt-testcases

Do not check fail cases for verify skipped

2026-03-13 18:04:16 +00:00

scripts

Disable "DTLS proxy: 3d, (openssl|gnutls) client, fragmentation" tests

2026-03-25 08:45:22 +01:00

src

Fix some compile time guards

2026-03-16 12:27:21 +00:00

suites

Bump version

2026-03-26 22:34:28 +00:00

.gitignore

cmake: Generate test_keys.h and test_certs.h in the build tree

2025-03-26 21:19:28 +01:00

CMakeLists.txt

cmake: Introduce TF_PSA_CRYPTO_PRIVATE_INCLUDE_DIRS

2026-03-09 08:28:51 +01:00

compat-in-docker.sh

…

compat.sh

Revert "ssl_server2.c: DTLS: Attempt to read the response to the close notification"

2026-03-24 18:38:37 +01:00

context-info.sh

Fix test and formatting in ssl_context_info

2025-04-29 22:02:24 +02:00

Descriptions.txt

…

make-in-docker.sh

…

Makefile

tests: make: Fix spaces instead of tab

2026-03-09 08:28:51 +01:00

ssl-opt.sh

ssl: accept TLS 1.2 rsa_pss_rsae in client SKE

2026-04-28 14:02:54 +08:00