mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-02-03 20:54:00 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Migration guide added and ChangeLog clarified

Browse Source 
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
This commit is contained in:
TRodziewicz 2021-05-14 14:07:51 +02:00
parent 102c89ed65
commit 95f8f22c27
2 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog.d/issue4361.txt
View File

@ -1,2 +1,3 @@
Removals Removals
* Remove the MBEDTLS_SSL_RECORD_CHECKING option. Fixes #4361. * Remove the MBEDTLS_SSL_RECORD_CHECKING option and enable by default its
previous action. Fixes #4361.

13
docs/3.0-migration-guide.d/remove_ssl_record_checking.md Normal file
View File

@ -0,0 +1,13 @@
Remove MBEDTLS_SSL_RECORD_CHECKING option and enable its action by default
--------------------------------------------------------------------------
This change does not affects users who use the default config.h, as the
option MBEDTLS_SSL_RECORD_CHECKING was already on by default.
This option was added only to controls compilation of one function
(mbedtls_ssl_check_record()) used in DTLS to check a buffer's validity and
authenticity. Switching it off poses a security risk.
For users who changed the default setting of the option there is no real path
of migration.