Merge pull request #3281 from cesanta/tls36retro

add call to mbedtls_psa_free()for MbedTLS >= 3, defaulting to TLS 1.3…

Author: scaprile

mongoose.c

@@ -14295,6 +14295,10 @@ void mg_tls_free(struct mg_connection *c) {
     mbedtls_ssl_config_free(&tls->conf);
 #ifdef MBEDTLS_SSL_SESSION_TICKETS
     mbedtls_ssl_ticket_free(&tls->ticket);
+#endif
+#if defined(MBEDTLS_VERSION_NUMBER) && MBEDTLS_VERSION_NUMBER >= 0x03000000 && \
+    defined(MBEDTLS_PSA_CRYPTO_C)
+    mbedtls_psa_crypto_free(); // https://github.com/Mbed-TLS/mbedtls/issues/9223#issuecomment-2144898336
 #endif
     mg_free(tls);
     c->tls = NULL;

src/tls_mbed.c

@@ -58,6 +58,10 @@ void mg_tls_free(struct mg_connection *c) {
     mbedtls_ssl_config_free(&tls->conf);
 #ifdef MBEDTLS_SSL_SESSION_TICKETS
     mbedtls_ssl_ticket_free(&tls->ticket);
+#endif
+#if defined(MBEDTLS_VERSION_NUMBER) && MBEDTLS_VERSION_NUMBER >= 0x03000000 && \
+    defined(MBEDTLS_PSA_CRYPTO_C)
+    mbedtls_psa_crypto_free(); // https://github.com/Mbed-TLS/mbedtls/issues/9223#issuecomment-2144898336
 #endif
     mg_free(tls);
     c->tls = NULL;