95     MBEDTLS_SSL_DEBUG_MSG(2, ("No matched ciphersuite, psk_ciphersuite_id=%x, psk_hash_alg=%lx",  in ssl_tls13_select_ciphersuite()
134                 MBEDTLS_SSL_DEBUG_MSG(3, ("Found PSK KEX MODE"));  in ssl_tls13_parse_key_exchange_modes_ext()
138                 MBEDTLS_SSL_DEBUG_MSG(3, ("Found PSK_EPHEMERAL KEX MODE"));  in ssl_tls13_parse_key_exchange_modes_ext()
201     MBEDTLS_SSL_DEBUG_MSG(2, ("=> check_identity_match_ticket"));  in ssl_tls13_offered_psks_check_identity_match_ticket()
228             MBEDTLS_SSL_DEBUG_MSG(3, ("ticket is expired"));  in ssl_tls13_offered_psks_check_identity_match_ticket()
233             MBEDTLS_SSL_DEBUG_MSG(3, ("ticket is not authentic"));  in ssl_tls13_offered_psks_check_identity_match_ticket()
256         MBEDTLS_SSL_DEBUG_MSG(3, ("Ticket TLS version is not 1.3."));  in ssl_tls13_offered_psks_check_identity_match_ticket()
264         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_offered_psks_check_identity_match_ticket()
284         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_offered_psks_check_identity_match_ticket()
306         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_offered_psks_check_identity_match_ticket()
324     MBEDTLS_SSL_DEBUG_MSG(2, ("<= check_identity_match_ticket"));  in ssl_tls13_offered_psks_check_identity_match_ticket()
362         MBEDTLS_SSL_DEBUG_MSG(4, ("ticket: obfuscated_ticket_age: %u",  in ssl_tls13_offered_psks_check_identity_match()
443         MBEDTLS_SSL_DEBUG_MSG(1, ("PSK binder calculation failed."));  in ssl_tls13_offered_psks_check_binder_match()
607         MBEDTLS_SSL_DEBUG_MSG(4, ("found matched identity"));  in ssl_tls13_parse_pre_shared_key_ext()
643             MBEDTLS_SSL_DEBUG_MSG(3, ("No suitable PSK key exchange mode"));  in ssl_tls13_parse_pre_shared_key_ext()
676             MBEDTLS_SSL_DEBUG_MSG(3, ("Invalid binder."));  in ssl_tls13_parse_pre_shared_key_ext()
700         MBEDTLS_SSL_DEBUG_MSG(3, ("pre_shared_key extension decode error"));  in ssl_tls13_parse_pre_shared_key_ext()
714         MBEDTLS_SSL_DEBUG_MSG(3, ("No usable PSK or ticket."));  in ssl_tls13_parse_pre_shared_key_ext()
719     MBEDTLS_SSL_DEBUG_MSG(3, ("Pre shared key found"));  in ssl_tls13_parse_pre_shared_key_ext()
754     MBEDTLS_SSL_DEBUG_MSG(3, ("server hello, adding pre_shared_key extension"));  in ssl_tls13_write_server_pre_shared_key_ext()
764     MBEDTLS_SSL_DEBUG_MSG(4, ("sent selected_identity: %u",  in ssl_tls13_write_server_pre_shared_key_ext()
814         MBEDTLS_SSL_DEBUG_MSG(1, ("No supported version found."));  in ssl_tls13_parse_supported_versions_ext()
821     MBEDTLS_SSL_DEBUG_MSG(1, ("Negotiated version: [%04x]",  in ssl_tls13_parse_supported_versions_ext()
861         MBEDTLS_SSL_DEBUG_MSG(2,  in ssl_tls13_parse_supported_groups_ext()
872         MBEDTLS_SSL_DEBUG_MSG(2,  in ssl_tls13_parse_supported_groups_ext()
965             MBEDTLS_SSL_DEBUG_MSG(2, ("ECDH/FFDH group: %s (%04x)",  in ssl_tls13_parse_key_shares_ext()
975             MBEDTLS_SSL_DEBUG_MSG(4, ("Unrecognized NamedGroup %u",  in ssl_tls13_parse_key_shares_ext()
985         MBEDTLS_SSL_DEBUG_MSG(1, ("no matching key share"));  in ssl_tls13_parse_key_shares_ext()
1128         MBEDTLS_SSL_DEBUG_MSG(3, ("server has no certificate"));  in ssl_tls13_pick_key_cert()
1159                 MBEDTLS_SSL_DEBUG_MSG(3, ("certificate mismatch: "  in ssl_tls13_pick_key_cert()
1164             MBEDTLS_SSL_DEBUG_MSG(3,  in ssl_tls13_pick_key_cert()
1182                 MBEDTLS_SSL_DEBUG_MSG(3,  in ssl_tls13_pick_key_cert()
1196     MBEDTLS_SSL_DEBUG_MSG(2, ("ssl_tls13_pick_key_cert:"  in ssl_tls13_pick_key_cert()
1305         MBEDTLS_SSL_DEBUG_MSG(1, ("Unsupported version of TLS."));  in ssl_tls13_parse_client_hello()
1431         MBEDTLS_SSL_DEBUG_MSG(1, ("bad client hello message"));  in ssl_tls13_parse_client_hello()
1456     MBEDTLS_SSL_DEBUG_MSG(2, ("selected ciphersuite: %04x - %s",  in ssl_tls13_parse_client_hello()
1465         MBEDTLS_SSL_DEBUG_MSG(1, ("bad legacy compression method"));  in ssl_tls13_parse_client_hello()
1508             MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_parse_client_hello()
1534                 MBEDTLS_SSL_DEBUG_MSG(3, ("found ServerName extension"));  in ssl_tls13_parse_client_hello()
1547                 MBEDTLS_SSL_DEBUG_MSG(3, ("found supported group extension"));  in ssl_tls13_parse_client_hello()
1568                 MBEDTLS_SSL_DEBUG_MSG(3, ("found key share extension"));  in ssl_tls13_parse_client_hello()
1580                     MBEDTLS_SSL_DEBUG_MSG(2, ("No usable share for key agreement."));  in ssl_tls13_parse_client_hello()
1599                 MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_parse_client_hello()
1614                 MBEDTLS_SSL_DEBUG_MSG(3, ("found pre_shared_key extension"));  in ssl_tls13_parse_client_hello()
1634                 MBEDTLS_SSL_DEBUG_MSG(3, ("found alpn extension"));  in ssl_tls13_parse_client_hello()
1647                 MBEDTLS_SSL_DEBUG_MSG(3, ("found signature_algorithms extension"));  in ssl_tls13_parse_client_hello()
1661                 MBEDTLS_SSL_DEBUG_MSG(3, ("found record_size_limit extension"));  in ssl_tls13_parse_client_hello()
1751         MBEDTLS_SSL_DEBUG_MSG(2, ("key exchange mode: psk_ephemeral"));  in ssl_tls13_parse_client_hello()
1758         MBEDTLS_SSL_DEBUG_MSG(2, ("key exchange mode: ephemeral"));  in ssl_tls13_parse_client_hello()
1765         MBEDTLS_SSL_DEBUG_MSG(2, ("key exchange mode: psk"));  in ssl_tls13_parse_client_hello()
1769         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_parse_client_hello()
1783         MBEDTLS_SSL_DEBUG_MSG(2, ("Select PSK ciphersuite: %04x - %s",  in ssl_tls13_parse_client_hello()
1809         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_check_early_data_requirements()
1819         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_check_early_data_requirements()
1840         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_check_early_data_requirements()
1848         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_check_early_data_requirements()
1856         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_check_early_data_requirements()
1879         MBEDTLS_SSL_DEBUG_MSG(1, ("EarlyData: rejected, the selected ALPN is different "  in ssl_tls13_check_early_data_requirements()
1955     MBEDTLS_SSL_DEBUG_MSG(2, ("=> parse client hello"));  in ssl_tls13_process_client_hello()
1979             MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_process_client_hello()
2003     MBEDTLS_SSL_DEBUG_MSG(2, ("<= parse client hello"));  in ssl_tls13_process_client_hello()
2049     MBEDTLS_SSL_DEBUG_MSG(3, ("server hello, write selected version"));  in ssl_tls13_write_server_hello_supported_versions_ext()
2066     MBEDTLS_SSL_DEBUG_MSG(3, ("supported version: [%04x]",  in ssl_tls13_write_server_hello_supported_versions_ext()
2144     MBEDTLS_SSL_DEBUG_MSG(3, ("server hello, adding key share extension"));  in ssl_tls13_write_key_share_ext()
2146     MBEDTLS_SSL_DEBUG_MSG(2, ("server hello, write selected_group: %s (%04x)",  in ssl_tls13_write_key_share_ext()
2214         MBEDTLS_SSL_DEBUG_MSG(4, ("Skip key_share extension in HRR"));  in ssl_tls13_write_hrr_key_share_ext()
2219         MBEDTLS_SSL_DEBUG_MSG(1, ("no matching named group found"));  in ssl_tls13_write_hrr_key_share_ext()
2234     MBEDTLS_SSL_DEBUG_MSG(3,  in ssl_tls13_write_hrr_key_share_ext()
2325     MBEDTLS_SSL_DEBUG_MSG(3,  in ssl_tls13_write_server_hello_body()
2421     MBEDTLS_SSL_DEBUG_MSG(2, ("=> write server hello"));  in ssl_tls13_write_server_hello()
2454     MBEDTLS_SSL_DEBUG_MSG(2, ("<= write server hello"));  in ssl_tls13_write_server_hello()
2467         MBEDTLS_SSL_DEBUG_MSG(1, ("Too many HRRs"));  in ssl_tls13_prepare_hello_retry_request()
2476     MBEDTLS_SSL_DEBUG_MSG(4, ("Reset transcript for HRR"));  in ssl_tls13_prepare_hello_retry_request()
2494     MBEDTLS_SSL_DEBUG_MSG(2, ("=> write hello retry request"));  in ssl_tls13_write_hello_retry_request()
2527     MBEDTLS_SSL_DEBUG_MSG(2, ("<= write hello retry request"));  in ssl_tls13_write_hello_retry_request()
2615     MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_write_encrypted_extensions()
2618     MBEDTLS_SSL_DEBUG_MSG(2, ("=> write encrypted extensions"));  in ssl_tls13_write_encrypted_extensions()
2646     MBEDTLS_SSL_DEBUG_MSG(2, ("<= write encrypted extensions"));  in ssl_tls13_write_encrypted_extensions()
2746     MBEDTLS_SSL_DEBUG_MSG(2, ("=> write certificate request"));  in ssl_tls13_write_certificate_request()
2768         MBEDTLS_SSL_DEBUG_MSG(2, ("<= skip write certificate request"));  in ssl_tls13_write_certificate_request()
2771         MBEDTLS_SSL_DEBUG_MSG(1, ("should never happen"));  in ssl_tls13_write_certificate_request()
2779     MBEDTLS_SSL_DEBUG_MSG(2, ("<= write certificate request"));  in ssl_tls13_write_certificate_request()
2794         MBEDTLS_SSL_DEBUG_MSG(2, ("No certificate available."));  in ssl_tls13_write_server_certificate()
2870         MBEDTLS_SSL_DEBUG_MSG(2, ("skip parse certificate"));  in ssl_tls13_prepare_for_handshake_second_flight()
2871         MBEDTLS_SSL_DEBUG_MSG(2, ("skip parse certificate verify"));  in ssl_tls13_prepare_for_handshake_second_flight()
2901         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_write_server_finished()
2910     MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_write_server_finished()
2947         MBEDTLS_SSL_DEBUG_MSG(3, ("Received an end_of_early_data message."));  in ssl_tls13_end_of_early_data_coordinate()
2953             MBEDTLS_SSL_DEBUG_MSG(3, ("Received early data"));  in ssl_tls13_end_of_early_data_coordinate()
3028     MBEDTLS_SSL_DEBUG_MSG(2, ("=> ssl_tls13_process_end_of_early_data"));  in ssl_tls13_process_end_of_early_data()
3043         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_process_end_of_early_data()
3059         MBEDTLS_SSL_DEBUG_MSG(1, ("should never happen"));  in ssl_tls13_process_end_of_early_data()
3065     MBEDTLS_SSL_DEBUG_MSG(2, ("<= ssl_tls13_process_end_of_early_data"));  in ssl_tls13_process_end_of_early_data()
3099     MBEDTLS_SSL_DEBUG_MSG(2, ("handshake: done"));  in ssl_tls13_handshake_wrapup()
3132         MBEDTLS_SSL_DEBUG_MSG(2, ("NewSessionTicket: disabled,"  in ssl_tls13_write_new_session_ticket_coordinate()
3137         MBEDTLS_SSL_DEBUG_MSG(2, ("NewSessionTicket: disabled,"  in ssl_tls13_write_new_session_ticket_coordinate()
3143         MBEDTLS_SSL_DEBUG_MSG(2, ("NewSessionTicket: all tickets have "  in ssl_tls13_write_new_session_ticket_coordinate()
3162     MBEDTLS_SSL_DEBUG_MSG(2, ("=> prepare NewSessionTicket msg"));  in ssl_tls13_prepare_new_session_ticket()
3199     MBEDTLS_SSL_DEBUG_MSG(3, ("ticket_age_add: %u",  in ssl_tls13_prepare_new_session_ticket()
3297     MBEDTLS_SSL_DEBUG_MSG(2, ("=> write NewSessionTicket msg"));  in ssl_tls13_write_new_session_ticket_body()
3330         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_write_new_session_ticket_body()
3337     MBEDTLS_SSL_DEBUG_MSG(3, ("ticket_lifetime: %u",  in ssl_tls13_write_new_session_ticket_body()
3342     MBEDTLS_SSL_DEBUG_MSG(3, ("ticket_age_add: %u",  in ssl_tls13_write_new_session_ticket_body()
3380         MBEDTLS_SSL_DEBUG_MSG(  in ssl_tls13_write_new_session_ticket_body()
3391     MBEDTLS_SSL_DEBUG_MSG(2, ("<= write new session ticket"));  in ssl_tls13_write_new_session_ticket_body()
3460     MBEDTLS_SSL_DEBUG_MSG(2, ("tls13 server state: %s(%d)",  in mbedtls_ssl_tls13_handshake_server_step()
3558                     MBEDTLS_SSL_DEBUG_MSG(2, ("skip parse certificate verify"));  in mbedtls_ssl_tls13_handshake_server_step()
3601             MBEDTLS_SSL_DEBUG_MSG(1, ("invalid state %d", ssl->state));  in mbedtls_ssl_tls13_handshake_server_step()