Fix a few TLS compliance issues#10594

Open

kareem-wolfssl wants to merge 9 commits into

wolfSSL:masterfrom

kareem-wolfssl:zd21873

Commits on Jul 22, 2026

Also send decode_error for BUFFER_E as this error code is used throughout tls.c/tls13.c.
kareem-wolfssl
committed
Prevent exporting keying material until the handshake is complete.
kareem-wolfssl
committed
Check for ticket expiration before using a ticket for resumption.
kareem-wolfssl
committed
Code review feedback: set idSz = 0 for both cases.
kareem-wolfssl
committed
Skip session timeout check if bornOn is 0 or if a secret callback is set. This should fix hostap EAP-FAST failures.
kareem-wolfssl
committed
Code review feedback
kareem-wolfssl
committed
Avoid advertising NULL cipher suites by default unless WOLFSSL_TLS13_NULL_CIPHER_IN_DEFAULT is defined.
kareem-wolfssl
committed
Avoid using preprocessor gate inside of a macro.
kareem-wolfssl
committed

Commits on Jul 23, 2026

Add WOLFSSL_TLS13_NULL_CIPHER_IN_DEFAULT to known macros.
kareem-wolfssl
committed