• mbedTLS & PSA

    From apam@21:3/197 to All on Sunday, September 21, 2025 03:36:26
    Is anyone familiar with mbedTLS?

    I've ported it over to my operating system, and have successfully gotten
    https websites to download with TLS 1.2, but TLS 1.3 requires PSA enabled
    in mbedTLS.

    I disabled PSA, as while it was enabled it kept complaining about not
    enough entropy (which I was trying to fake with a PRNG) but haven't
    enabled it as while I was reading I got the impression it was for ARM.

    So, I'm wondering if going down the rabbit hole of enabling PSA and
    trying to figure out how to supply it with enough entropy is worth it. Especially since, I don't know if I'm going to do that only to discover
    it only works on ARM, or some other road block.

    Oh, the point of getting mbed TLS to work is I wanted to make a gemini
    client for my OS - I thought it would be fun, and not as stupidly
    difficult as a web browser :) Gemini supports TLS 1.2 I believe, but I'd
    still like to get TLS 1.3 to work...

    Andrew


    --- envy/0.1-6dee535
    * Origin: Quinn - Random Things - bbs.quinnos.com:2323 (21:3/197)
  • From apam@21:3/197 to apam on Sunday, September 21, 2025 05:41:18
    I've ported it over to my operating system, and have successfully
    gotten https websites to download with TLS 1.2, but TLS 1.3 requires
    PSA enabled in mbedTLS.

    I disabled PSA, as while it was enabled it kept complaining about not
    enough entropy (which I was trying to fake with a PRNG) but haven't
    enabled it as while I was reading I got the impression it was for ARM.

    I worked it out... I have TLS 1.3 now :)

    Andrew


    --- envy/0.1-6dee535
    * Origin: Quinn - Random Things - bbs.quinnos.com:2323 (21:3/197)