Fix a few TLS compliance issues

[kareem-wolfssl]

Description

Partially fixes zd#21873

Testing

Built in tests

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Pull request overview

This PR tightens TLS compliance-related behavior in the core handshake and exporter paths, primarily by enforcing correct timing/validity constraints for keying material export and session ticket usage.

Changes:

• Refuse wolfSSL_export_keying_material() calls until the handshake has fully completed (per RFC 8446 / RFC 5705 intent).
• Suppress use of expired stored session tickets (fall back to full handshake instead of attempting resumption).
• Map BUFFER_E to decode_error in TranslateErrorToAlert().

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
src/ssl.c	Adds a “handshake complete” gate before exporting keying material.
src/internal.c	Adds client-side session ticket expiry suppression and extends alert translation for buffer errors.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

MemBrowse Memory Report

gcc-arm-cortex-m3

• FLASH: .text +8 B (+0.0%, 122,547 B / 262,144 B, total: 47% used)

gcc-arm-cortex-m4-openssl-compat

• FLASH: .text +64 B (+0.0%, 769,276 B / 1,048,576 B, total: 73% used)

gcc-arm-cortex-m4-rsa-only

• FLASH: .text +64 B (+0.0%, 325,976 B / 1,048,576 B, total: 31% used)

stm32-sim-stm32h753

• FLASH: .text +64 B (+0.0%, 183,892 B / 2,097,152 B, total: 9% used)
  No memory changes detected for:
• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• linuxkm-standard

[dgarske]

Skoll Code Review

Scan type: reviewOverall recommendation: COMMENT
Findings: 4 total — 3 posted, 1 skipped
2 finding(s) posted as inline comments (see file-level comments below)

Posted findings

• [Medium] Expired-ticket branch drops SessionTicket extension entirely; client may no longer obtain a fresh ticket — src/internal.c:31665-31687
• [Medium] No tests added for the three new compliance behaviors — tests/api.c
• [Low] Redundant dual condition in keying-material handshake-complete gate — src/ssl.c:4076-4080

Skipped findings

• [Low] Preprocessor directives indented to code column instead of repo convention

Review generated by Skoll

[dgarske]

See skoll review #10594 (review)

[kareem-wolfssl]

Retest this please