]> git.ipfire.org Git - thirdparty/openvpn.git/commit
mbedtls: Allow TLS 1.3 if available
authorMax Fillinger <maximilian.fillinger@foxcrypto.com>
Tue, 3 Jun 2025 14:06:24 +0000 (16:06 +0200)
committerGert Doering <gert@greenie.muc.de>
Tue, 3 Jun 2025 14:15:06 +0000 (16:15 +0200)
commitabed088c9bf3d6ab479dbe815d4d307b21b816b6
tree7400cfe9b7df1fafb633a735d28191266bb4528f
parent4c2022ab9044d4449d2f6480fcf845461f02c114
mbedtls: Allow TLS 1.3 if available

We need mbedtls_ssl_export_keying_material() to support TLS 1.3. The
workaround we use for TLS 1.2 does not work for TLS 1.3.

Change-Id: If5e832866b312a2f8a1ce6b4e00d40e3dcf63681
Signed-off-by: Max Fillinger <maximilian.fillinger@foxcrypto.com>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Message-Id: <20250603140631.11696-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg31858.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
README.mbedtls
src/openvpn/ssl_mbedtls.c