tree 4eab641c4a33fb2320bd356bd7a9447f2903efba
parent 59503017405b852872fdc6d38f542692a4bc4660
author Gilles Peskine <Gilles.Peskine@arm.com> 1724442699 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1724575479 +0200

Don't call psa_crypto_init in test programs when not required for TLS 1.3

For backward compatibility with Mbed TLS <=3.5.x, applications must be able
to make a TLS connection with a peer that supports both TLS 1.2 and TLS 1.3,
regardless of whether they call psa_crypto_init(). Since Mbed TLS 3.6.0,
we enable TLS 1.3 in the default configuration, so we must take care of
calling psa_crypto_init() if needed. This is a change from TLS 1.3 in
previous versions, where enabling MBEDTLS_SSL_PROTO_TLS1_3 was a user
choice and could have additional requirement.

This commit changes our test programs to validate that the library
does not have the compatibility-breaking requirement.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>