All issues

Search results

X.509 certificates reference public keys stored in crypto storage

component-x509

enhancement

size-mEstimated task size: medium (~1w)Estimated task size: medium (~1w)

Status: Open.

Feature

#10913 In Mbed-TLS/mbedtls;

· ImKrian opened on Aug 10, 2026

mbedtls_oid_from_numeric_string() accepts wrapping numeric strings, silently encoding a different OID

bug

component-x509

good-first-issueGood for newcomersGood for newcomers

Status: Open.

#10910 In Mbed-TLS/mbedtls;

· LukeW1999 opened on Aug 8, 2026

mbedTLS Client Accepts an Over-Limit NewSessionTicket.extensions Vector

component-tls13

Status: Open.

Bug

#10907 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026

Confirmed interoperability failure on large TLS 1.3 Certificate messages

component-tls13

Status: Open.

Bug

#10906 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026

Confirmed mismatch in PskIdentity.identity<1..2^16-1> under the baseline case

component-tls13

Status: Open.

Bug

#10905 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026

Post-Finished ChangeCipherSpec is ignored instead of rejected

component-tls13

Status: Open.

Bug

#10903 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026

TLS 1.3 Protected CCS Does Not Trigger the RFC-Required Abort

component-tls13

Status: Open.

Bug

#10901 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026

Confirmed missing unexpected_message alert for undefined record types

component-tls13

Status: Open.

Bug

#10904 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026

Empty resumption ticket shrinks OfferedPsks.identities below the RFC minimum

component-tls13

Status: Open.

Bug

#10902 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026

Confirmed use of legacy no_certificate alert for missing TLS 1.3 client certificates

component-tls13

Status: Open.

Bug

#10900 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026

Confirmed wrong alert mapping for HRR ServerHello key_share group mismatch

component-tls13

Status: Open.

Bug

#10896 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026

TLS 1.3 client accepts a no-op HelloRetryRequest instead of aborting

component-tls13

Status: Open.

Bug

#10898 In Mbed-TLS/mbedtls;

· LiD0209 opened on Aug 6, 2026