mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2025-08-02 12:14:38 +02:00
Changes after PR review.
- removed additions to REAME.md - changed coding style of conditional PSKKEM announce as requested.
This commit is contained in:
@@ -113,7 +113,6 @@ CVE-2020-12966 https://www.amd.com/en/corporate/product-security/bulletin/amd-sb
|
|||||||
* Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442
|
* Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442
|
||||||
* Expand CAAM support with QNX to include i.MX8 boards and add AES-CTR support
|
* Expand CAAM support with QNX to include i.MX8 boards and add AES-CTR support
|
||||||
* Enhanced glitching protection by hardening the TLS encrypt operations
|
* Enhanced glitching protection by hardening the TLS encrypt operations
|
||||||
* The TLS Extension for PSK Key Exchange Modes is now always included in a ClientHello (with PSK enabled) to improve inter-op.
|
|
||||||
|
|
||||||
## Math and Performance
|
## Math and Performance
|
||||||
|
|
||||||
|
14
src/tls.c
14
src/tls.c
@@ -11386,16 +11386,18 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer)
|
|||||||
#endif /* !NO_PSK */
|
#endif /* !NO_PSK */
|
||||||
#if defined(HAVE_SESSION_TICKET) || !defined(NO_PSK)
|
#if defined(HAVE_SESSION_TICKET) || !defined(NO_PSK)
|
||||||
|
|
||||||
#ifndef NO_TLSX_PSKKEM_PLAIN_ANNOUNCE
|
|
||||||
/* Some servers do not generate session tickets unless
|
/* Some servers do not generate session tickets unless
|
||||||
* the extension is seen in a non-resume client hello */
|
* the extension is seen in a non-resume client hello.
|
||||||
if (1) {
|
* We used to send it only if we were otherwise using PSK.
|
||||||
(void)usingPSK;
|
* Now always send it. Define NO_TLSX_PSKKEM_PLAIN_ANNOUNCE
|
||||||
#else
|
* to revert to the old behaviour. */
|
||||||
if (usingPSK) {
|
#ifdef NO_TLSX_PSKKEM_PLAIN_ANNOUNCE
|
||||||
|
if (usingPSK)
|
||||||
#endif
|
#endif
|
||||||
|
{
|
||||||
byte modes;
|
byte modes;
|
||||||
|
|
||||||
|
(void)usingPSK;
|
||||||
/* Pre-shared key modes: mandatory extension for resumption. */
|
/* Pre-shared key modes: mandatory extension for resumption. */
|
||||||
modes = 1 << PSK_KE;
|
modes = 1 << PSK_KE;
|
||||||
#if !defined(NO_DH) || defined(HAVE_ECC) || \
|
#if !defined(NO_DH) || defined(HAVE_ECC) || \
|
||||||
|
Reference in New Issue
Block a user