mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-11-09 23:00:03 +08:00
8 lines
414 B
Plaintext
8 lines
414 B
Plaintext
Bugfix
|
|
* Fix TLS 1.3 handshakes using opaque pre-shared keys configured through
|
|
mbedtls_ssl_conf_psk_opaque(). The client computed an incorrect PSK
|
|
binder, the server rejected the PSK identity, and the early key
|
|
schedule exported the key with psa_export_key(), which fails for
|
|
non-exportable keys. Opaque PSKs are now consumed directly via
|
|
psa_key_derivation_input_key(). Fixes #10956.
|