[padelsbach]

No description provided.

[Copilot]

🟡 Changes recommended

Non-blocking TLS I/O mishandles retryable results and partial writes, while CI dependency fetching fails for SHA inputs and uses unpinned or potentially mismatched commits.

4 open issues

• Fetch and build wolfSSL from the pinned commit · New
• Pin wolfPSA to a known-working commit · New
• Retry partial and transient nonblocking TLS writes · New
• Retry WANT_WRITE while reading TLS data · New

What changed in this PR

Adds an Mbed TLS 4.x client example using wolfPSA’s compatibility layer over wolfSSL, integrated with the repository’s example build and CI infrastructure.

Changes:

• Adds a TLS client with certificate verification and a non-blocking socket option.
• Adds build instructions and checks for TLS 1.2, TLS 1.3, and expected error cases.
• Registers the example in CI and adds dependency-fetch configuration.

File	Description
README.md	Introduces and links the compatibility example.
mbedtls-compat/​README.md	Documents building, running, testing, and compatibility limitations.
mbedtls-compat/​Makefile	Builds the client and test servers and exposes check targets.
mbedtls-compat/​client-tls-mbedtls.c	Implements the client using Mbed TLS APIs.
mbedtls-compat/​check.sh	Checks protocol versions, socket modes, and error results.
.gitignore	Excludes generated example binaries.
.github/​workflows/​examples.yml	Passes the wolfSSL ref to dependency-fetch steps.
.github/​examples-manifest.yml	Registers the example and its dependency builds.

_{Review effort: Balanced}