Skip to content

Commit b6fff90

Browse files
authored
Merge pull request #9907 from mpg/conf-curves-3.6
[3.6 backport]: mbedtls_conf_curves()
2 parents 79d5ea2 + ea18c7e commit b6fff90

File tree

2 files changed

+6
-5
lines changed

2 files changed

+6
-5
lines changed

docs/3.0-migration-guide.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -748,7 +748,7 @@ for both DTLS-CID and TLS 1.3.
748748

749749
The default preference order for curves in TLS now favors resource usage (performance and memory consumption) over size. The exact order is unspecified and may change, but generally you can expect 256-bit curves to be preferred over larger curves.
750750

751-
If you prefer a different order, call `mbedtls_ssl_conf_curves()` when configuring a TLS connection.
751+
If you prefer a different order, call `mbedtls_ssl_conf_groups()` when configuring a TLS connection.
752752

753753
### SSL key export interface change
754754

@@ -1025,7 +1025,7 @@ mbedtls_x509_crt_profile my_profile = mbedtls_x509_crt_profile_default;
10251025
my_profile.allowed_mds |= MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA224 );
10261026
```
10271027

1028-
If you still need to allow hashes and curves in TLS that have been removed from the default configuration, call `mbedtls_ssl_conf_sig_hashes()` and `mbedtls_ssl_conf_curves()` with the desired lists.
1028+
If you still need to allow hashes and curves in TLS that have been removed from the default configuration, call `mbedtls_ssl_conf_sig_hashes()` and `mbedtls_ssl_conf_groups()` with the desired lists.
10291029

10301030
### Remove 3DES ciphersuites
10311031

tests/suites/test_suite_ssl.function

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3059,7 +3059,7 @@ exit:
30593059
}
30603060
/* END_CASE */
30613061

3062-
/* BEGIN_CASE depends_on:MBEDTLS_DEPRECATED_REMOVED */
3062+
/* BEGIN_CASE */
30633063
void conf_group()
30643064
{
30653065
uint16_t iana_tls_group_list[] = { MBEDTLS_SSL_IANA_TLS_GROUP_SECP192R1,
@@ -3071,8 +3071,9 @@ void conf_group()
30713071
mbedtls_ssl_config_init(&conf);
30723072

30733073
mbedtls_ssl_conf_rng(&conf, mbedtls_test_random, NULL);
3074-
mbedtls_ssl_conf_max_tls_version(&conf, MBEDTLS_SSL_VERSION_TLS1_2);
3075-
mbedtls_ssl_conf_min_tls_version(&conf, MBEDTLS_SSL_VERSION_TLS1_2);
3074+
mbedtls_ssl_config_defaults(&conf, MBEDTLS_SSL_IS_CLIENT,
3075+
MBEDTLS_SSL_TRANSPORT_STREAM,
3076+
MBEDTLS_SSL_PRESET_DEFAULT);
30763077

30773078
mbedtls_ssl_conf_groups(&conf, iana_tls_group_list);
30783079

0 commit comments

Comments
 (0)