-
Notifications
You must be signed in to change notification settings - Fork 8.2k
Closed
Labels
Description
Inside ext/lib/crypto/mbedtls/configs/config-mini-tls1_2.h we see:
* Minimal configuration for TLS 1.1 (RFC 4346) for Zephyr, implementing only
* the required ciphersuite: MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA
Such discrepancies is always a bad sign for crypto things.
That file appears to be based on the upstream https://github.com/ARMmbed/mbedtls/blob/development/configs/config-mini-tls1_1.h , and there doesn't seem to have been enough changes made to it to warrant calling it TLS 1.2 (unless such changes were made before the initial version was committed (with the stale comments)).
All in all, this matter should be re-reviewed and clarified.