Claude e37137241d feat(ssl): run TLS 1.2 client connections over Mbed TLS ...

sceSslConnect performs the client handshake on the host socket that the
guest number maps to in the libkernel or libSceNet socket table, and
sceSslRead and sceSslWrite carry application data. Session state comes
from the context's memory pool, and the server is verified against the
CAs loaded with sceSslLoadCert; a loaded client certificate is sent when
the server asks for one.

libkernel exports KernelLookupSocketNative_nid_no_patch, which checks
its own socket table before the one libSceNet registers. Pools take a
lock so connections can allocate outside the library lock.

TLS 1.3 is compiled out. A missing CA, a verify callback, would-block
sockets and every failure whose console code is unknown throw, as
recorded in the libSceSsl debt entry.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RoU3ZF76A6uR8sCA7NMLch

2026-10-16 11:37:32 +00:00

..

include

feat(ssl): run TLS 1.2 client connections over Mbed TLS

2026-10-16 11:37:32 +00:00

src

feat(ssl): run TLS 1.2 client connections over Mbed TLS

2026-10-16 11:37:32 +00:00