[Bug 294776] security/mbedtls4: Apply upstream fix for a TLS 1.2 client regression

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294776

--- Comment #7 from commit-hook@FreeBSD.org ---
A commit in branch 2026Q2 references this bug:

URL:
https://cgit.FreeBSD.org/ports/commit/?id=bf7564b4446f06df6236331fcf11179e500ee374

commit bf7564b4446f06df6236331fcf11179e500ee374
Author:     Fabian Keil <fk@fabiankeil.de>
AuthorDate: 2026-04-30 15:13:39 +0000
Commit:     Vladimir Druzenko <vvd@FreeBSD.org>
CommitDate: 2026-04-30 15:17:37 +0000

    security/mbedtls4: Apply upstream fix for a TLS 1.2 client regression

    TLS 1.2 client regression that caused valid ServerKeyExchange signatures
    using rsa_pss_rsae_* to be rejected:
    https://github.com/Mbed-TLS/mbedtls/issues/10668
   
https://github.com/Mbed-TLS/mbedtls/commit/5fc28f401666f3ab3338168f6dcee71e6b468a4e

    While at it, add a DEBUG option that was useful to figure out the
    problem.

    PR:             294776
    Sponsored by:   UNIS Labs
    Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
    MFH:            2026Q2

    (cherry picked from commit 12d2ebc10b688232d9e0928c180512d30d445414)

 security/mbedtls4/Makefile | 14 ++++++++++++++
 security/mbedtls4/distinfo |  4 +++-
 2 files changed, 17 insertions(+), 1 deletion(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.