Update MbedTLS 3.4.0 -> 3.6.2 and set it as default #6
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
gpoulios
force-pushed
the
update-mbedtls
branch
from
ba8d265 to
3539b06
Compare
Even though one could in theory simply set CONFIG_MBEDTLS_VERSION="3.6.2",
this commit is needed for 2 reasons:
1. The patches need to be updated: 0001 works almost as-is (with fuzz 2)
but 0002 hunk #4 fails and needed adjustment. Otherwise, the patches
are identical.
2. mbedtls_config.h needs to be updated: Following the same approach
for the Kconfig this commit updates both Kconfig and mbedtls_config.h
according to the changes:
mbedtls$ git diff v3.4.0...v3.6.2 -- include/mbedtls/mbedtls_config.h
Signed-off-by: George Poulios <[email protected]>
gpoulios
force-pushed
the
update-mbedtls
branch
from
3539b06 to
596aac3
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Summary
Even though there is
CONFIG_MBEDTLS_VERSION, this commit is needed for 2 reasons:Impact
None for projects not using MbedTLS.
For projects using MbedTLS, please check your
CONFIG_MBEDTLS_*settings for any options affected by this commit, or MbedTLS'sgit diff v3.4.0...v3.6.2 -- include/mbedtls/mbedtls_config.h. Besides that, numerous security fixes.Testing
Builds fine and seems to work fine but I haven't performed extensive testing: I've only run tests on RISC-V.