-
Notifications
You must be signed in to change notification settings - Fork 2.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove MBEDTLS_SSL_EXPORT_KEYS, making it always on #4989
Remove MBEDTLS_SSL_EXPORT_KEYS, making it always on #4989
Conversation
This option only gated an ability to set a callback, but was deemed unnecessary as it was yet another define to remember when writing tests, or test configurations. Fixes Mbed-TLS#4653. Signed-off-by: Andrzej Kurek <[email protected]>
When not using DEBUG_C, but using the DTLS CID feature - a null pointer was accessed in ssl_tls.c. Signed-off-by: Andrzej Kurek <[email protected]>
db07234
to
324f72e
Compare
Signed-off-by: Andrzej Kurek <[email protected]>
3308774
to
a72fe64
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM - thanks!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No issues found.
LGTM
I believe the failures are related to the ongoing CI issue. |
make | ||
|
||
msg "test: Connection ID enabled, debug disabled" | ||
make test |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is this actually a non-regression test? In 2.28, the bug (which I'll fix in #5730) isn't triggered by unit tests, only by compat.sh
.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It is a non-regression test in 3.x. Without the bug fix:
Test moving clients handshake to state: CLIENT_CHANGE_CIPHER_SPEC . Segmentation fault (core dumped)
On the other hand, in 2.28, test_suite_ssl
passes in this configuration, even though the corresponding test exists. I don't know why. The level of support for CID looks the same in both branches.
The fix was in Mbed-TLS#4989. We forgot to add a changelog entry. Signed-off-by: Gilles Peskine <[email protected]>
This option only gated an ability to set a callback, but was deemed unnecessary as it was yet another define to remember when writing tests, or test configurations.
Fixes #4653.
Fixes #3998.