Mbed-TLS/mbedtls-framework
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls-framework.git synced 2026-08-05 10:47:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Tiny fix in ChangeLog

Browse Source 
Signed-off-by: Elena Uziunaite <[email protected]>
This commit is contained in:
Elena Uziunaite
2024-08-22 09:00:57 +01:00
parent f72a510590
commit e0c6f80403
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/fix_reporting_of_key_usage_issues.txt
+1 -1
View File
@@ -1,7 +1,7 @@
Security
* With TLS 1.3, when a server enables optional authentication of the
client, if the client-provided certificate does not have appropriate values
in if keyUsage or extKeyUsage extensions, then the return value of
in keyUsage or extKeyUsage extensions, then the return value of
mbedtls_ssl_get_verify_result() would incorrectly have the
MBEDTLS_X509_BADCERT_KEY_USAGE and MBEDTLS_X509_BADCERT_KEY_USAGE bits
clear. As a result, an attacker that had a certificate valid for uses other