mbedtls: v3.6.0 workarounds

- add special sauce to disable unwanted peer verification by mbedtls
  when negotiating TLS v1.3
- add special sauce for MBEDTLS_ERR_SSL_RECEIVED_NEW_SESSION_TICKET
  return code on *writing* TLS data. We assume the data had not been
  written and EAGAIN.
- return correct Curl error code when peer verification failed.
- disable test_08_05 with 50 HTTP/1.1 connections, as mbedtls reports a
  memory allocation failed during handshake.
- bump CI mbedtls version to 3.6.0

Fixes #13653
Closes #13838
This commit is contained in:
Stefan Eissing 2024-05-31 13:01:17 +02:00 committed by Daniel Stenberg
parent 5dd8f13bfc
commit 5f9017d4e2
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
4 changed files with 52 additions and 10 deletions

View file

@ -46,7 +46,7 @@ env:
# renovate: datasource=github-tags depName=libressl-portable/portable versioning=semver registryUrl=https://github.com
libressl-version: 3.9.2
# renovate: datasource=github-tags depName=ARMmbed/mbedtls versioning=semver registryUrl=https://github.com
mbedtls-version: 3.5.0
mbedtls-version: 3.6.0
# renovate: datasource=github-tags depName=icing/mod_h2 versioning=semver registryUrl=https://github.com
mod_h2-version: 2.0.27
# renovate: datasource=github-tags depName=nibanks/msh3 versioning=semver registryUrl=https://github.com