Skip to content

Commit 10652b1

Browse files
author
Hanno Becker
committed
Improve ChangeLog wording for the commmit that Fixes Mbed-TLS#1954.
1 parent a24ed19 commit 10652b1

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

ChangeLog

+5-3
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,11 @@ Bugfix
1010
* Add ecc extensions only if an ecc based ciphersuite is used.
1111
This improves compliance to RFC 4492, and as a result, solves
1212
interoperability issues with BouncyCastle. Raised by milenamil in #1157.
13-
* Fix overly strict bounds check in ssl_parse_certificate_request()
14-
which could lead to valid CertificateRequest messages being rejected.
15-
Fixes #1954.
13+
* Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
14+
with TLS versions 1.1 and earlier when the server requested authentication
15+
without providing a list of CAs. This was due to an overly strict bounds
16+
check in parsing the CertificateRequest message,
17+
introduced in Mbed TLS 2.12.0. Fixes #1954.
1618

1719
= mbed TLS 2.1.14 branch released 2018-07-25
1820

0 commit comments

Comments
 (0)