Skip to content

mbedtls: Name of config-mini-tls1_2.h contradicts description #6131

@pfalcon

Description

@pfalcon

Inside ext/lib/crypto/mbedtls/configs/config-mini-tls1_2.h we see:

 * Minimal configuration for TLS 1.1 (RFC 4346) for Zephyr, implementing only
 * the required ciphersuite: MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA

Such discrepancies is always a bad sign for crypto things.

That file appears to be based on the upstream https://github.com/ARMmbed/mbedtls/blob/development/configs/config-mini-tls1_1.h , and there doesn't seem to have been enough changes made to it to warrant calling it TLS 1.2 (unless such changes were made before the initial version was committed (with the stale comments)).

All in all, this matter should be re-reviewed and clarified.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions