diff --git a/README.md b/README.md index 02a94ea4..0a69a665 100644 --- a/README.md +++ b/README.md @@ -94,6 +94,18 @@ The best way to interact with our team is through GitHub. If you have a support plan with [AWS Support](https://aws.amazon.com/premiumsupport/), you can also create a new support case. +#### Mac-Only TLS Behavior + +> [!NOTE] +> This SDK does not support TLS 1.3 on macOS. Support for TLS 1.3 on macOS is planned for a future release. + +Please note that on Mac, once a private key is used with a certificate, that certificate-key pair is imported into the Mac Keychain. All subsequent uses of that certificate will use the stored private key and ignore anything passed in programmatically. Beginning in v1.7.3, when a stored private key from the Keychain is used, the following will be logged at the "info" log level: + +``` +static: certificate has an existing certificate-key pair that was previously imported into the Keychain. + Using key from Keychain instead of the one provided. +``` + ## Resources Check out our resources for additional guidance too before opening an issue: diff --git a/documents/FAQ.md b/documents/FAQ.md index f2e925c0..fe0fa2f4 100644 --- a/documents/FAQ.md +++ b/documents/FAQ.md @@ -156,7 +156,7 @@ Here is an example launch.json file to run the pubsub sample The MQTT 311 Samples can be found in the v1.24.0 samples folder [here](https://github.com/aws/aws-iot-device-sdk-python-v2/tree/v1.24.0/samples) ### Certificate and Private Key Usage Across Different Versions of the SDK on macOS -A certificate and private key pair cannot be shared on a macOS device between aws-iot-device-sdk-python-v2 v1.27.0 and an earlier version. In the update to v1.27.0 we migrated macOS from using Apple's deprecated Security Framework to SecItem API. In doing so, certificate and private keys are imported in a non-backwards compatible manner into the Apple Keychain. +A certificate and private key pair cannot be shared on a macOS device between aws-iot-device-sdk-python-v2 v1.27.0 and any other versions. In the update to v1.27.0 we migrated macOS from using Apple's deprecated Security Framework to SecItem API. In doing so, certificate and private keys are imported in a non-backwards compatible manner into the Apple Keychain. ### I still have more questions about this sdk? diff --git a/setup.py b/setup.py index 6fc20c1d..94a1782f 100644 --- a/setup.py +++ b/setup.py @@ -40,7 +40,7 @@ def _load_version(): "Operating System :: OS Independent", ], install_requires=[ - 'awscrt==0.30.0', + 'awscrt==0.31.0', ], python_requires='>=3.8', )