From bb27b430134ee72d13b643c00f60c3d744d6bfa4 Mon Sep 17 00:00:00 2001 From: Ronald Cron Date: Fri, 10 Dec 2021 14:22:52 +0100 Subject: [PATCH] build: Fix TLS 1.3 prerequisites Signed-off-by: Ronald Cron --- include/mbedtls/check_config.h | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/include/mbedtls/check_config.h b/include/mbedtls/check_config.h index 085fb6b83..ce97f6a35 100644 --- a/include/mbedtls/check_config.h +++ b/include/mbedtls/check_config.h @@ -598,10 +598,15 @@ #error "MBEDTLS_SSL_PROTO_TLS1_2 defined, but not all prerequisites" #endif +/* + * HKDF is mandatory for TLS 1.3. + * Otherwise support for at least one ciphersuite mandates either SHA_256 or + * SHA_384. + */ #if defined(MBEDTLS_SSL_PROTO_TLS1_3) && \ - ( ( !defined(MBEDTLS_HKDF_C) && !defined(MBEDTLS_SHA256_C) && \ - !defined(MBEDTLS_SHA512_C) ) \ - || ( !defined(MBEDTLS_PSA_CRYPTO_C) ) ) + ( ( !defined(MBEDTLS_HKDF_C) ) || \ + ( !defined(MBEDTLS_SHA256_C) && !defined(MBEDTLS_SHA384_C) ) || \ + ( !defined(MBEDTLS_PSA_CRYPTO_C) ) ) #error "MBEDTLS_SSL_PROTO_TLS1_3 defined, but not all prerequisites" #endif