Fix a TLS 1.2 regression that caused clients to reject valid ServerKeyExchange signatures using RSA-PSS signature algorithms. The TLS 1.2 regression resulted in errors like: $ curl https://api.domeneshop.no/v0/ curl: (35) ssl_handshake returned: (-0x6600) SSL - A field in a message was incorrect or inconsistent with other fields Fixes: https://github.com/openwrt/openwrt/issues/22874 Fixes: https://github.com/openwrt/openwrt/issues/23116 Fixes: f48ef0040b7e ("mbedtls: update to 3.6.6") Signed-off-by: Magnus Kroken <mkroken@gmail.com> Link: https://github.com/openwrt/openwrt/pull/23066 (cherry picked from commit e65001e3e7ce8509ab937f339d92409668c4af9c) Link: https://github.com/openwrt/openwrt/pull/23362 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> (cherry picked from commit 002aa2402850af78e41201e05d71d69ca8b0f606) |
||
|---|---|---|
| .. | ||
| patches | ||
| Config.in | ||
| Makefile | ||