v1rtu3x fe0c44827a Fix X.509 certificate profiles to honor MBEDTLS_PK_SIGALG_ECDSA ... When verifying a certificate against a custom mbedtls_x509_crt_profile, the profile check for allowed PK algorithms used a direct cast from mbedtls_pk_type_t to mbedtls_pk_sigalg_t. These two enums have different numerical values, so an ECKEY certificate (pk_type=2) was incorrectly matched against MBEDTLS_PK_SIGALG_RSA_PSS (sigalg=2) instead of MBEDTLS_PK_SIGALG_ECDSA (sigalg=3). Add a translation helper x509_pk_type_to_sigalg() that maps internal pk_type values to the public sigalg values used in profiles. Fixes #10849 Fixes #10747 (cherry picked from commit dbcbf281520597bba65a117d00889cb7bb93aacf) Signed-off-by: v1rtu3x <149050962+v1rtu3x@users.noreply.github.com>		2026-09-29 15:24:16 +03:00
..
00README.md	scripts: fix paths for files moved to framework	2025-01-08 09:59:18 +01:00
cmake-config.txt	CMake: separate base config	2026-08-27 12:34:42 +02:00
fix-x509-profile-pk-sigalg.txt	Fix X.509 certificate profiles to honor MBEDTLS_PK_SIGALG_ECDSA	2026-09-29 15:24:16 +03:00
serialized-data-load-hardening.txt	Reject out-of-bounds session ID length in ssl_tls12_session_load	2026-08-03 13:44:23 +05:30