[holtrop-wolfssl]

Description

A resumed handshake has no Certificate message, so no peer certificate hash was cached and the first renegotiation of a resumed connection accepted any certificate, even one for a different subject.

Record in the session (and session ticket and serialized session) whether the peer sent a certificate and its hash, and restore it into the secure renegotiation state when a resumption is confirmed. A renegotiation of a resumed session that does not record this refuses any peer certificate with SCR_DIFFERENT_CERT_E. The peer certificate is now hashed whether or not renegotiation_info was negotiated, as a later resumption may negotiate it.

Fixes ZD#22694 issue C.

Testing

How did you test?

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota.

[github-actions]

MemBrowse Memory Report · Explore what changed →

gcc-arm-cortex-m4-openssl-compat

• FLASH: .text +384 B (+0.0%, 796,508 B / 1,048,576 B, total: 76% used)
• RAM: .bss +240 B (+0.2%, 134,060 B / 262,144 B, total: 51% used)

gcc-arm-cortex-m4-rsa-only

• FLASH: .text +256 B (+0.1%, 342,664 B / 1,048,576 B, total: 33% used)
• RAM: .bss +1,320 B (+7.9%, 17,996 B / 262,144 B, total: 7% used)

zephyr-frdm_rw612

• FLASH: log_const_area -8 B, rodata -8 B, text +1,600 B (+0.6%, 284,048 B / 67,108,864 B, total: 0% used)

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• stm32-sim-stm32h753

---

_{Catch memory regressions in CI with MemBrowse. Free for open source.}

[holtrop-wolfssl]

retest this please