Improve comment about PSK TLS 1.3 configuration options

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
This commit is contained in:
Ronald Cron 2021-09-27 12:06:52 +02:00
parent 023987feef
commit 1fa5088c0b

View File

@ -163,7 +163,10 @@ the handshake with an handshake_failure closure alert.
| MBEDTLS_USE_PSA_CRYPTO | no |
(1) Some support has already been upstreamed but it is incomplete.
(2) Make sense in TLS 1.3 context but their current definition is TLS 1.2 only.
(2) Key exchange configuration options for TLS 1.3 will likely to be
organized around the notion of key exchange mode along the line
of the MBEDTLS_SSL_TLS13_KEY_EXCHANGE_MODE_NONE/PSK/PSK_EPHEMERAL/EPHEMERAL
runtime configuration macros.
Not in the plan yet but probably necessary for a viable client:
- server_name extension