Changes after PR review.
- removed additions to REAME.md - changed coding style of conditional PSKKEM announce as requested.
This commit is contained in:
parent
1db8013566
commit
a943de7969
@ -113,7 +113,6 @@ CVE-2020-12966 https://www.amd.com/en/corporate/product-security/bulletin/amd-sb
|
||||
* Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442
|
||||
* Expand CAAM support with QNX to include i.MX8 boards and add AES-CTR support
|
||||
* Enhanced glitching protection by hardening the TLS encrypt operations
|
||||
* The TLS Extension for PSK Key Exchange Modes is now always included in a ClientHello (with PSK enabled) to improve inter-op.
|
||||
|
||||
## Math and Performance
|
||||
|
||||
|
14
src/tls.c
14
src/tls.c
@ -11386,16 +11386,18 @@ int TLSX_PopulateExtensions(WOLFSSL* ssl, byte isServer)
|
||||
#endif /* !NO_PSK */
|
||||
#if defined(HAVE_SESSION_TICKET) || !defined(NO_PSK)
|
||||
|
||||
#ifndef NO_TLSX_PSKKEM_PLAIN_ANNOUNCE
|
||||
/* Some servers do not generate session tickets unless
|
||||
* the extension is seen in a non-resume client hello */
|
||||
if (1) {
|
||||
(void)usingPSK;
|
||||
#else
|
||||
if (usingPSK) {
|
||||
* the extension is seen in a non-resume client hello.
|
||||
* We used to send it only if we were otherwise using PSK.
|
||||
* Now always send it. Define NO_TLSX_PSKKEM_PLAIN_ANNOUNCE
|
||||
* to revert to the old behaviour. */
|
||||
#ifdef NO_TLSX_PSKKEM_PLAIN_ANNOUNCE
|
||||
if (usingPSK)
|
||||
#endif
|
||||
{
|
||||
byte modes;
|
||||
|
||||
(void)usingPSK;
|
||||
/* Pre-shared key modes: mandatory extension for resumption. */
|
||||
modes = 1 << PSK_KE;
|
||||
#if !defined(NO_DH) || defined(HAVE_ECC) || \
|
||||
|
Loading…
x
Reference in New Issue
Block a user