hannestschofenig / mbedtls

An open source, portable, easy to use, readable and flexible SSL library
https://tls.mbed.org
Apache License 2.0
15 stars 8 forks source link

Add signature_algorithms field to mbedtls_ssl_config #322

Closed yuhaoth closed 3 years ago

yuhaoth commented 3 years ago

Supported signature algorithms structures are different between TLS1.2 and TLS1.3. Origin sig_hashes represents hash field defined in RFC5246, but TLS1.3 does not define the field. TLS1.3 define an enum to represent signaure/hash pairs, and the enum is not compatible with TLS1.2.

So, a new field is needed for supported signature algorthms of TLS1.3.

References: