• mbedTLS & PSA

    From apam@21:3/197 to All on Sun Sep 21 03:36:26 2025
    Is anyone familiar with mbedTLS?

    I've ported it over to my operating system, and have successfully gotten
    https websites to download with TLS 1.2, but TLS 1.3 requires PSA enabled
    in mbedTLS.

    I disabled PSA, as while it was enabled it kept complaining about not
    enough entropy (which I was trying to fake with a PRNG) but haven't
    enabled it as while I was reading I got the impression it was for ARM.

    So, I'm wondering if going down the rabbit hole of enabling PSA and
    trying to figure out how to supply it with enough entropy is worth it. Especially since, I don't know if I'm going to do that only to discover
    it only works on ARM, or some other road block.

    Oh, the point of getting mbed TLS to work is I wanted to make a gemini
    client for my OS - I thought it would be fun, and not as stupidly
    difficult as a web browser :) Gemini supports TLS 1.2 I believe, but I'd
    still like to get TLS 1.3 to work...

    Andrew


    --- envy/0.1-6dee535
    * Origin: Quinn - Random Things - bbs.quinnos.com:2323 (21:3/197)
  • From apam@21:3/197 to apam on Sun Sep 21 05:41:18 2025
    I've ported it over to my operating system, and have successfully
    gotten https websites to download with TLS 1.2, but TLS 1.3 requires
    PSA enabled in mbedTLS.

    I disabled PSA, as while it was enabled it kept complaining about not
    enough entropy (which I was trying to fake with a PRNG) but haven't
    enabled it as while I was reading I got the impression it was for ARM.

    I worked it out... I have TLS 1.3 now :)

    Andrew


    --- envy/0.1-6dee535
    * Origin: Quinn - Random Things - bbs.quinnos.com:2323 (21:3/197)