Skip to content

Commit 78b2594

Browse files
authored
Disable anonymous key exchange ciphersuite in mbedtls of TizenRT. (#231)
The test_tls.js has a subset that tests if a server is created without key and certificate. In this case there is no ciphersuite, that is why a `tlsClientError` error happens when a client tries to connect to the server. This is the expected behavior. The mbedtls of TizenRT defines an anonymous ciphersuite, that does not require authentication. So there is a ciphersuite even if there is no key and certificate prided for the server. In this case the clients can connect to the server without the expected error. JSRemoteTest-DCO-1.0-Signed-off-by: Roland Takacs [email protected]
1 parent d4f595e commit 78b2594

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

jstest/resources/patches/tizenrt-mbedtls.diff

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,16 @@
1+
diff --git a/external/include/mbedtls/config.h b/external/include/mbedtls/config.h
2+
index 7d5cda4..0f1401f 100644
3+
--- a/external/include/mbedtls/config.h
4+
+++ b/external/include/mbedtls/config.h
5+
@@ -678,7 +678,7 @@
6+
* enabled as well):
7+
* MBEDTLS_TLS_ECDH_ANON_WITH_AES_128_CBC_SHA256
8+
*/
9+
-#define MBEDTLS_KEY_EXCHANGE_ECDH_ANON_ENABLED
10+
+//#define MBEDTLS_KEY_EXCHANGE_ECDH_ANON_ENABLED
11+
12+
/**
13+
* \def MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
114
diff --git a/external/mbedtls/Makefile b/external/mbedtls/Makefile
215
index 5e321e3..fb174a7 100644
316
--- a/external/mbedtls/Makefile

0 commit comments

Comments
 (0)