Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DTLS Connection ID Support #44914

Closed

Conversation

plskeggs
Copy link
Contributor

@plskeggs plskeggs commented Apr 15, 2022

This updates commits from #36738, and builds on them.

  • update for latest main branch
  • complete the existing support for user-provided cipherlist so it functions
  • improve debug logging
  • add extended master secret control
  • add function to query the peer's CID

@zephyrbot
Copy link
Collaborator

zephyrbot commented Apr 15, 2022

The following west manifest projects have been modified in this Pull Request:

Name Old Revision New Revision Diff
mbedtls zephyrproject-rtos/mbedtls@7fed49c (zephyr) zephyrproject-rtos/mbedtls#36 zephyrproject-rtos/mbedtls#36/files

Note: This message is automatically posted and updated by the Manifest GitHub Action.

@zephyrbot zephyrbot added the area: Sockets Networking sockets label Apr 19, 2022
Copy link
Contributor

@rlubos rlubos left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would be good to get a word from mbed TLS fork maintainers, whether I'd be even allowed to cherry-pick certain mbed TLS functionalities from upstream.

subsys/net/lib/sockets/sockets_tls.c Show resolved Hide resolved
subsys/net/lib/sockets/sockets_tls.c Outdated Show resolved Hide resolved
subsys/net/lib/sockets/sockets_tls.c Outdated Show resolved Hide resolved
plskeggs added a commit to plskeggs/sdk-zephyr that referenced this pull request Apr 28, 2023
DTLS systems can accept the Server Name Indication extension
without using X509 certificates.  Allow this for either
MBEDTLS_X509_CRT_PARSE_C or CONFIG_MBEDTLS_DTLS.

Upstream PR: zephyrproject-rtos/zephyr#44914

Signed-off-by: Pete Skeggs <peter.skeggs@nordicsemi.no>
plskeggs added a commit to plskeggs/sdk-zephyr that referenced this pull request Apr 28, 2023
DTLS systems can accept the Server Name Indication extension
without using X509 certificates.  Allow this for either
MBEDTLS_X509_CRT_PARSE_C or CONFIG_MBEDTLS_DTLS.

Upstream PR: zephyrproject-rtos/zephyr#44914

Signed-off-by: Pete Skeggs <peter.skeggs@nordicsemi.no>
plskeggs added a commit to plskeggs/sdk-zephyr that referenced this pull request Apr 28, 2023
Add function to get the peer CID.  Add case
to ztls_getsockopt_ctx() to call it when
optname is TLS_DTLS_PEER_CONNECTION_ID.

zephyrproject-rtos/zephyr#44914

Signed-off-by: Pete Skeggs <peter.skeggs@nordicsemi.no>
@rlubos rlubos mentioned this pull request Jul 18, 2023
@plskeggs plskeggs mentioned this pull request Aug 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area: API Changes to public APIs area: Modules area: Networking area: Sockets Networking sockets DNM This PR should not be merged (Do Not Merge) manifest manifest-mbedtls Stale
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants