Skip to content

Commit 517e84a

Browse files
author
Hanno Becker
committed
Improve ChangeLog wording for the commmit that Fixes Mbed-TLS#1954.
1 parent 3a333a5 commit 517e84a

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

ChangeLog

+5-3
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,11 @@ Bugfix
1010
* Add ecc extensions only if an ecc based ciphersuite is used.
1111
This improves compliance to RFC 4492, and as a result, solves
1212
interoperability issues with BouncyCastle. Raised by milenamil in #1157.
13-
* Fix overly strict bounds check in ssl_parse_certificate_request()
14-
which could lead to valid CertificateRequest messages being rejected.
15-
Fixes #1954.
13+
* Fix a bug that caused SSL/TLS clients to incorrectly abort the handshake
14+
with TLS versions 1.1 and earlier when the server requested authentication
15+
without providing a list of CAs. This was due to an overly strict bounds
16+
check in parsing the CertificateRequest message,
17+
introduced in Mbed TLS 2.12.0. Fixes #1954.
1618

1719
Changes
1820
* Improve compatibility with some alternative CCM implementations by using

0 commit comments

Comments
 (0)