net: enable extended master secret

Extended Master Secret is a DTLS extension that ensures the Master Secret is tied to the handshake parameters and is used to prevent certain Man in the Middle attacks. Golioth reserves the right to enforce the use of Extended Master Secret on the server side in the future, so this option must be enabled to ensure continued compatibility with Golioth. Signed-off-by: Sam Friedman <[email protected]>
golioth · Oct 11, 2023 · 2ab7986 · 2ab7986
1 parent b0f9c3a
commit 2ab7986
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/net/golioth/Kconfig b/net/golioth/Kconfig
@@ -12,6 +12,7 @@ config GOLIOTH
 	select MBEDTLS_DTLS if MBEDTLS_BUILTIN
 	select MBEDTLS_TLS_LIBRARY if NRF_SECURITY
 	select MBEDTLS_SSL_PROTO_DTLS if NRF_SECURITY
+	select MBEDTLS_SSL_EXTENDED_MASTER_SECRET
 	select NET_SOCKETS
 	select NET_UDP
 	imply DNS_RESOLVER if NET_NATIVE