TeamHepta/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-04-23 12:15:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

ssl: narrow TLS 1.2 RSA-PSS handling and add interop coverage

Browse Source 
Narrow TLS 1.2 RSA-PSS handling to the client ServerKeyExchange parse path and add OpenSSL and GnuTLS interoperability tests.

Signed-off-by: Viktor Sokolovskiy <maokaman@gmail.com>
This commit is contained in:
Viktor Sokolovskiy
2026-04-17 18:52:34 +03:00
parent c4738fab06
commit 3833db7c7c
6 changed files with 91 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog.d/fix-tls12-rsa-pss-sigalgs.txt
View File

@@ -1,3 +1,4 @@
Bugfix
* Fix a TLS 1.2 regression that caused clients to reject valid
ServerKeyExchange signatures using RSA-PSS signature scheme values.
ServerKeyExchange signatures using RSA-PSS signature algorithms.
Fixes #10668.