Forum: The Down-Lo BBS

mbedTLS & PSA

From apam@21:3/197 to All on Sun Sep 21 03:36:26 2025

Is anyone familiar with mbedTLS?

I've ported it over to my operating system, and have successfully gotten
https websites to download with TLS 1.2, but TLS 1.3 requires PSA enabled
in mbedTLS.

I disabled PSA, as while it was enabled it kept complaining about not
enough entropy (which I was trying to fake with a PRNG) but haven't
enabled it as while I was reading I got the impression it was for ARM.

So, I'm wondering if going down the rabbit hole of enabling PSA and
trying to figure out how to supply it with enough entropy is worth it. Especially since, I don't know if I'm going to do that only to discover
it only works on ARM, or some other road block.

Oh, the point of getting mbed TLS to work is I wanted to make a gemini
client for my OS - I thought it would be fun, and not as stupidly
difficult as a web browser :) Gemini supports TLS 1.2 I believe, but I'd
still like to get TLS 1.3 to work...

Andrew

--- envy/0.1-6dee535
* Origin: Quinn - Random Things - bbs.quinnos.com:2323 (21:3/197)