mbedtls/ChangeLog.d
Viktor Sokolovskiy 5fc28f4016 ssl: accept TLS 1.2 rsa_pss_rsae in client SKE
Fix a TLS 1.2 client regression that caused valid ServerKeyExchange signatures using rsa_pss_rsae_* to be rejected.

Allow rsa_pss_rsae_* in the TLS 1.2 client ServerKeyExchange parse path when the algorithm is supported and was offered by the client. Add OpenSSL and GnuTLS interoperability coverage for TLS 1.2 servers that force rsa_pss_rsae_sha256.

Fixes #10668.

Signed-off-by: Viktor Sokolovskiy <maokaman@gmail.com>
2026-04-17 19:16:20 +03:00
..
00README.md scripts: fix paths for files moved to framework 2025-01-08 09:59:18 +01:00
fix-tls12-rsa-pss-sigalgs.txt ssl: accept TLS 1.2 rsa_pss_rsae in client SKE 2026-04-17 19:16:20 +03:00
security-advice.txt Mention the new advice about compiler options in the changelog 2026-04-01 11:08:23 +02:00