File tree 1 file changed +5
-3
lines changed
1 file changed +5
-3
lines changed Original file line number Diff line number Diff line change @@ -10,9 +10,11 @@ Bugfix
10
10
* Add ecc extensions only if an ecc based ciphersuite is used.
11
11
This improves compliance to RFC 4492, and as a result, solves
12
12
interoperability issues with BouncyCastle. Raised by milenamil in #1157.
13
- * Fix overly strict bounds check in ssl_parse_certificate_request()
14
- which could lead to valid CertificateRequest messages being rejected.
15
- Fixes #1954.
13
+ * Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
14
+ with TLS versions 1.1 and earlier when the server requested authentication
15
+ without providing a list of CAs. This was due to an overly strict bounds
16
+ check in parsing the CertificateRequest message,
17
+ introduced in Mbed TLS 2.12.0. Fixes #1954.
16
18
17
19
= mbed TLS 2.1.14 branch released 2018-07-25
18
20
You can’t perform that action at this time.
0 commit comments