prplos/package/libs/mbedtls
Magnus Kroken 778613a683 mbedtls: backport upstream patches to fix TLS 1.2 client issues
Fix a TLS 1.2 regression that caused clients to reject valid
ServerKeyExchange signatures using RSA-PSS signature algorithms.

The TLS 1.2 regression resulted in errors like:
$ curl https://api.domeneshop.no/v0/
curl: (35) ssl_handshake returned: (-0x6600) SSL - A field in a message was incorrect or inconsistent with other fields

Fixes: https://github.com/openwrt/openwrt/issues/22874
Fixes: https://github.com/openwrt/openwrt/issues/23116
Fixes: f48ef0040b7e ("mbedtls: update to 3.6.6")
Signed-off-by: Magnus Kroken <mkroken@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/23066
(cherry picked from commit e65001e3e7ce8509ab937f339d92409668c4af9c)
Link: https://github.com/openwrt/openwrt/pull/23362
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
(cherry picked from commit 002aa2402850af78e41201e05d71d69ca8b0f606)
2026-08-18 11:40:41 +01:00
..
patches mbedtls: backport upstream patches to fix TLS 1.2 client issues 2026-08-18 11:40:41 +01:00
Config.in mbedtls: Expose MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED config option 2026-07-09 10:57:24 +01:00
Makefile mbedtls: backport upstream patches to fix TLS 1.2 client issues 2026-08-18 11:40:41 +01:00