commit a6033ac431503d7de23c4dfb497051715bcba1fe
author Andrzej Kurek <andrzej.kurek@arm.com> Tue May 30 15:16:34 2023 -0400
committer Andrzej Kurek <andrzej.kurek@arm.com> Tue Jun 13 05:46:47 2023 -0400
tree f92182d825bc99648525f7188b9a9b5fb13855a9
parent f1b659ed62e9c9de1796d753d952a180699976a0

Add missing guards in tls 1.3

Error translation is only used with these
defines on.
Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>

library/ssl_tls13_client.c

diff --git a/library/ssl_tls13_client.c b/library/ssl_tls13_client.c
index eb733b3..6ec3170 100644
--- a/library/ssl_tls13_client.c
+++ b/library/ssl_tls13_client.c
@@ -35,6 +35,7 @@
 #include "ssl_debug_helpers.h"
 #include "md_psa.h"
 
+#if defined(PSA_WANT_ALG_ECDH)
 /* Define a local translating function to save code size by not using too many
  * arguments in each translating place. */
 static int local_err_translation(psa_status_t status)
@@ -44,6 +45,8 @@
                                  psa_generic_status_to_mbedtls);
 }
 #define PSA_TO_MBEDTLS_ERR(status) local_err_translation(status)
+#endif
+
 /* Write extensions */
 
 /*

library/ssl_tls13_generic.c

diff --git a/library/ssl_tls13_generic.c b/library/ssl_tls13_generic.c
index e58c3e5..fa193ff 100644
--- a/library/ssl_tls13_generic.c
+++ b/library/ssl_tls13_generic.c
@@ -39,6 +39,8 @@
 #include "psa/crypto.h"
 #include "mbedtls/psa_util.h"
 
+#if defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED) || \
+    defined(PSA_WANT_ALG_ECDH)
 /* Define a local translating function to save code size by not using too many
  * arguments in each translating place. */
 static int local_err_translation(psa_status_t status)
@@ -48,6 +50,7 @@
                                  psa_generic_status_to_mbedtls);
 }
 #define PSA_TO_MBEDTLS_ERR(status) local_err_translation(status)
+#endif
 
 const uint8_t mbedtls_ssl_tls13_hello_retry_request_magic[
     MBEDTLS_SERVER_HELLO_RANDOM_LEN] =