Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-09-10 12:19:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

Migration guide added and ChangeLog clarified

Browse Source 
Signed-off-by: TRodziewicz <[email protected]>
This commit is contained in:
TRodziewicz
2021-05-14 14:07:51 +02:00
parent 102c89ed65
commit 95f8f22c27
2 changed files with 15 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ChangeLog.d/issue4361.txt
+2 -1
View File
@@ -1,2 +1,3 @@
Removals
* Remove the MBEDTLS_SSL_RECORD_CHECKING option. Fixes #4361.
* Remove the MBEDTLS_SSL_RECORD_CHECKING option and enable by default its
previous action. Fixes #4361.
docs/3.0-migration-guide.d/remove_ssl_record_checking.md
+13
View File
@@ -0,0 +1,13 @@
Remove MBEDTLS_SSL_RECORD_CHECKING option and enable its action by default
--------------------------------------------------------------------------
This change does not affects users who use the default config.h, as the
option MBEDTLS_SSL_RECORD_CHECKING was already on by default.
This option was added only to controls compilation of one function
(mbedtls_ssl_check_record()) used in DTLS to check a buffer's validity and
authenticity. Switching it off poses a security risk.
For users who changed the default setting of the option there is no real path
of migration.