Enable server cert verification #3478
Open
+77
−2
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add TLSv1.3 support in wifi example for RW612 and IW610. Signed-off-by: Hui Bai <[email protected]> (cherry picked from commit af9f889)
…tiple VIF This commit links the hostap PR required for the nrf7002 driver. west.yml is updated Signed-off-by: Hanan Arshad <[email protected]> Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit 58e7dba)
…ignal.h paths Update the hostap module to use non-prefixed paths for the ISO C time.h and signal.h headers. Signed-off-by: Chris Friedt <[email protected]> (cherry picked from commit 882ee96)
The hostap module is updated with a build fix fetched from upstream. Signed-off-by: Pieter De Gendt <[email protected]> (cherry picked from commit 5a50364)
DUT Failed to associate fast-gtc/fast-mscahpv2 enterprise network, there is error log shows 'EAP-FAST: Compound MAC did not match'. tls_connection_get_eap_fast_key() gets wrong key, currently using mbedtls_ssl_tls_prf to derive key, and it's not PSA API. Therefore, conn->expkey_keyblock_size can't be set as 0, the correct expkey_keyblock_size should contain keylen + mac_key_len + ivlen. Remove MBEDTLS_USE_PSA_CRYPTO to get keyblock_size correctly. Signed-off-by: Maochen Wang <[email protected]> (cherry picked from commit dfd6efc)
Due to the recent nRF70 driver changes, the driver ops are removed from config, but few functions in hostap still depend on that, so, pull the fix for hostap driver ops. Signed-off-by: Chaitanya Tata <[email protected]> (cherry picked from commit fa0d623)
D-Triveni
requested review from
krish2718,
nika-nordic,
rado17 and
richabp
and removed request for
nika-nordic
|
The following west manifest projects have changed revision in this Pull Request:
✅ All manifest checks OK Note: This message is automatically posted and updated by the Manifest GitHub Action. |
krish2718
approved these changes
Nov 7, 2025
Enable hostname validation for server certificate verification. Upstream PR #: 98190 Signed-off-by: Triveni Danda <[email protected]>
…rameters Add support to handle domain match and suffix match parameters for proper server certification validation. Upstream PR #: 98190 Signed-off-by: Triveni Danda <[email protected]>
D-Triveni
force-pushed
the
enable_server_cert_verification
branch
from
d875972 to
8ab37a7
Compare
richabp
requested changes
Nov 7, 2025
…structions Add instructions for verifying the authentication server’s certificate domain using exact domain match and domain suffix match options. Upstream PR #: 98190 Signed-off-by: Triveni Danda <[email protected]>
D-Triveni
force-pushed
the
enable_server_cert_verification
branch
from
8ab37a7 to
a03df38
Compare
richabp
approved these changes
Nov 7, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
7 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
manifest-pr-skip