Improve wording, punctuation, etc.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2022-11-29 22:39:44 +01:00
parent 787c79dc1a
commit 20c1f03dd5
9 changed files with 26 additions and 27 deletions

View File

@ -5,12 +5,13 @@ Features
Changes Changes
* Previously the macro MBEDTLS_SSL_DTLS_CONNECTION_ID implemented version 05 * Previously the macro MBEDTLS_SSL_DTLS_CONNECTION_ID implemented version 05
of the draft, and was marked experimental and disabled by default. It is of the IETF draft, and was marked experimental and disabled by default.
now no longer experimental, and implements the final version from RFC 9146, It is now no longer experimental, and implements the final version from
which is not interoperable with the draft-05 version. If you need to RFC 9146, which is not interoperable with the draft-05 version.
communicate with peers that use earlier versions of Mbed TLS, you If you need to communicate with peers that use earlier versions of
need to define MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT to 1, but then you Mbed TLS, you need to define MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT to 1,
won't be able to communicate with peers that use the standard (non-draft) but then you won't be able to communicate with peers that use the standard
version. If you need to interoperate with both classes of peers with the (non-draft) version.
If you need to interoperate with both classes of peers with the
same build of Mbed TLS, please let us know about your situation on the same build of Mbed TLS, please let us know about your situation on the
mailing list or GitHub. mailing list or GitHub.

View File

@ -1,2 +1,2 @@
Changes Changes
* Add the ability to query PSA_WANT_xxx macros to query_compile_time_config * Add the ability to query PSA_WANT_xxx macros to query_compile_time_config.

View File

@ -1,3 +1,3 @@
Bugfix Bugfix
* Fix build error due to missing prototype * Fix a build error due to a missing prototype warning when
warning when MBEDTLS_DEPRECATED_REMOVED is enabled MBEDTLS_DEPRECATED_REMOVED is enabled.

View File

@ -1,4 +1,3 @@
Bugfix Bugfix
* Fix bugs and missing dependencies when * Fix bugs and missing dependencies when building and testing
building and testing configurations with configurations with only one encryption type enabled in TLS 1.2.
only one encryption type enabled in TLS 1.2.

View File

@ -1,3 +1,3 @@
Bugfix Bugfix
* Fixed an issue that cause compile error using CMake IAR toolchain. * Fix a compilation error when using CMake with an IAR toolchain.
Fixes #5964. Fixes #5964.

View File

@ -1,4 +1,4 @@
Bugfix Bugfix
* Fix TLS 1.3 session resumption fail. Fixes #6488. * Fix TLS 1.3 session resumption. Fixes #6488.
* Add configuration check to exclude TLS 1.3 optional authentication of * Add a configuration check to exclude optional client authentication
client. in TLS 1.3 (where it is forbidden).

View File

@ -1,3 +1,3 @@
Bugfix Bugfix
* Fix possible crash in TLS PRF code, if a failure to allocate memory occurs. * Fix a possible null pointer dereference if a memory allocation fails
Reported by Michael Madsen in #6516. in TLS PRF code. Reported by Michael Madsen in #6516.

View File

@ -1,6 +1,6 @@
Features Features
* Shared code to free x509 structs like mbedtls_x509_named_data * Shared code to free x509 structs like mbedtls_x509_named_data.
New deprecations New deprecations
* Deprecate mbedtls_asn1_free_named_data(). * Deprecate mbedtls_asn1_free_named_data().
Use mbedtls_asn1_free_named_data_list() Use mbedtls_asn1_free_named_data_list()
or mbedtls_asn1_free_named_data_list_shallow() or mbedtls_asn1_free_named_data_list_shallow().

View File

@ -1,9 +1,8 @@
Features Features
* Mbed TLS supports TLS 1.3 key establishment via pre-shared keys, * Mbed TLS now supports TLS 1.3 key establishment via pre-shared keys,
pre-shared keys provisioned externally or via the ticket mechanism pre-shared keys provisioned externally or via the ticket mechanism
(session resumption). (session resumption).
The MBEDTLS_SSL_SESSION_TICKETS configuration option controls the support The ticket mechanism is supported when the configuration option
for the ticket mechanism. MBEDTLS_SSL_SESSION_TICKETS is enabled.
MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_xxx_ENABLED configuration options New options MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_xxx_ENABLED
have been introduced to control the support for the three possible control the support for the three possible TLS 1.3 key exchange modes.
TLS 1.3 key exchange modes.