[gnutls-devel] GnuTLS | Support multiple identities for TLS 1.3 PSK (#1385)
Read-only notification of GnuTLS library development activities
gnutls-devel at lists.gnutls.org
Tue Jul 19 14:18:02 CEST 2022
Hannes Reinecke created an issue: https://gitlab.com/gnutls/gnutls/-/issues/1385
## Description of the feature:
Support multiple identities for PSK in TLS 1.3 as per RFC 8446 4.2.11.
## Applications that this feature may be relevant to:
NVMe-over-Fabrics TLS encryption has defined several possible identities per client.
To correctly support TLS 1.3 the client would need to include all of those identities in the Pre-Shared-Key ClientHello extension. With gnutls this is currently not possible, and so we have to restart negotiation when the wrong PSK had been presented.
## Is this feature implemented in other libraries (and which)
Not that I am aware.
--
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1385
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20220719/98a1fa87/attachment.html>
More information about the Gnutls-devel
mailing list