mbedTLS with support of TLS_1.3 in STM32CubeMX

[APilai]

Hi,

I'm using the STM32H753I-EVAL2 (MCU Type: STM32H753XIHX) to develop a new product.

The product will communicate to server using the LwIP (TCP Layer) + MbedTLS (SSL/TLS Layer), running over FreeRTOS environment.

We want to use the latest TLS protocol standard (TLS Version 1.3).

The problem is that the current version of MbedTLS (as provided by STM32CubeMX Version 6.10.0) is 2.16.2 - which does not supports TLS Version 1.3.

The latest MbedTLS version is 3.5.2 (as shown in Github).

My question is: when the STM32CubeMX will include the newest MbedTLS version, with TLS 1.3 support?

Thanks,

Asher

[chris_rt]

Hi,

I have the same problem. Do you got any information from ST?

Thanks,

Chris

[Noushadalik]

Hi,

I have the same problem. Can the existing mbedtls version 2.16.2 connect to a secure MQTT connection on port 8883 Any updates?

[SimonW]

This ticket has been open with ST for over a year with no response whatsoever.

It appears that STMCube is still shipping mbedTLS 2.16.2. This is now over 5 years old and even on the V2 version it is at least 10 releases behind (last V2 release is 2.28.10).

mbedTLS V3 has been available for over 4 years - and is not supported in STM32Cube anywhere as far as I can see.

Are ST taking cyber security seriously? It appears not.