cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-10-30 19:20:40 -04:00
Code Issues Packages Projects Releases Wiki Activity

Deprecate MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO

Browse Source
This commit is contained in:
Andres Amaya Garcia 2018-11-29 09:55:41 +00:00 committed by Manuel Pégourié-Gonnard
parent d020bfc396
commit 09634248cb
3 changed files with 25 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ChangeLog
View File

@ -2,6 +2,10 @@ mbed TLS ChangeLog (Sorted per branch, date)
= mbed TLS X.X.X branch released XXXX-XX-XX = mbed TLS X.X.X branch released XXXX-XX-XX
New deprecations
* Deprecate MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO that enables parsing
SSLv2 ClientHello messages.
Bugfix Bugfix
* Allow loading symlinked certificates. Fixes #3005. Reported and fixed * Allow loading symlinked certificates. Fixes #3005. Reported and fixed
by Jonathan Bennett <JBennett@incomsystems.biz> via #3008. by Jonathan Bennett <JBennett@incomsystems.biz> via #3008.

8
include/mbedtls/check_config.h
View File

@ -774,6 +774,14 @@
#error "MBEDTLS_HAVE_INT32/MBEDTLS_HAVE_INT64 and MBEDTLS_HAVE_ASM cannot be defined simultaneously" #error "MBEDTLS_HAVE_INT32/MBEDTLS_HAVE_INT64 and MBEDTLS_HAVE_ASM cannot be defined simultaneously"
#endif /* (MBEDTLS_HAVE_INT32 || MBEDTLS_HAVE_INT64) && MBEDTLS_HAVE_ASM */ #endif /* (MBEDTLS_HAVE_INT32 || MBEDTLS_HAVE_INT64) && MBEDTLS_HAVE_ASM */
#if defined(MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO)
#if defined(MBEDTLS_DEPRECATED_WARNING)
#warning "MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO is deprecated and will likely be removed in a future version of Mbed TLS"
#elif defined(MBEDTLS_DEPRECATED_REMOVED)
#error "MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO is deprecated and will likely be removed in a future version of Mbed TLS"
#endif
#endif /* MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO */
/* /*
* Avoid warning from -pedantic. This is a convenient place for this * Avoid warning from -pedantic. This is a convenient place for this
* workaround since this is included by every single file before the * workaround since this is included by every single file before the

23
include/mbedtls/config.h
View File

@ -233,27 +233,27 @@
/** /**
* \def MBEDTLS_DEPRECATED_WARNING * \def MBEDTLS_DEPRECATED_WARNING
* *
* Mark deprecated functions so that they generate a warning if used. * Mark deprecated functions and features so that they generate a warning if
* Functions deprecated in one version will usually be removed in the next * used. Functionality deprecated in one version will usually be removed in the
* version. You can enable this to help you prepare the transition to a new * next version. You can enable this to help you prepare the transition to a
* major version by making sure your code is not using these functions. * new major version by making sure your code is not using this functionality.
* *
* This only works with GCC and Clang. With other compilers, you may want to * This only works with GCC and Clang. With other compilers, you may want to
* use MBEDTLS_DEPRECATED_REMOVED * use MBEDTLS_DEPRECATED_REMOVED
* *
* Uncomment to get warnings on using deprecated functions. * Uncomment to get warnings on using deprecated functions and features.
*/ */
//#define MBEDTLS_DEPRECATED_WARNING //#define MBEDTLS_DEPRECATED_WARNING
/** /**
* \def MBEDTLS_DEPRECATED_REMOVED * \def MBEDTLS_DEPRECATED_REMOVED
* *
* Remove deprecated functions so that they generate an error if used. * Remove deprecated functions and features so that they generate an error if
* Functions deprecated in one version will usually be removed in the next * used. Functionality deprecated in one version will usually be removed in the
* version. You can enable this to help you prepare the transition to a new * next version. You can enable this to help you prepare the transition to a
* major version by making sure your code is not using these functions. * new major version by making sure your code is not using this functionality.
* *
* Uncomment to get errors on using deprecated functions. * Uncomment to get errors on using deprecated functions and features.
*/ */
//#define MBEDTLS_DEPRECATED_REMOVED //#define MBEDTLS_DEPRECATED_REMOVED
@ -1571,6 +1571,9 @@
* Enable support for receiving and parsing SSLv2 Client Hello messages for the * Enable support for receiving and parsing SSLv2 Client Hello messages for the
* SSL Server module (MBEDTLS_SSL_SRV_C). * SSL Server module (MBEDTLS_SSL_SRV_C).
* *
* \deprecated This option is deprecated and will likely be removed in a
* future version of Mbed TLS.
*
* Uncomment this macro to enable support for SSLv2 Client Hello messages. * Uncomment this macro to enable support for SSLv2 Client Hello messages.
*/ */
//#define MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO //#define MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO