aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRonald Cron <ronald.cron@arm.com>2024-03-15 16:13:37 +0100
committerRonald Cron <ronald.cron@arm.com>2024-03-18 13:06:59 +0100
commit27eb68d29588937741ed89fd4f395a37c20b2ac6 (patch)
treeedc652a5a6cd76f3e621e645860b02e3f8d3b1bb
parent47f8d0e840a5ab0179c5b90fbecf4609ef896268 (diff)
downloadmbedtls-27eb68d29588937741ed89fd4f395a37c20b2ac6.zip
mbedtls-27eb68d29588937741ed89fd4f395a37c20b2ac6.tar.gz
mbedtls-27eb68d29588937741ed89fd4f395a37c20b2ac6.tar.bz2
Enable TLS 1.3 by default
Signed-off-by: Ronald Cron <ronald.cron@arm.com>
-rw-r--r--ChangeLog.d/enable-tls13-by-default.txt2
-rw-r--r--include/mbedtls/mbedtls_config.h4
2 files changed, 4 insertions, 2 deletions
diff --git a/ChangeLog.d/enable-tls13-by-default.txt b/ChangeLog.d/enable-tls13-by-default.txt
new file mode 100644
index 0000000..636078c
--- /dev/null
+++ b/ChangeLog.d/enable-tls13-by-default.txt
@@ -0,0 +1,2 @@
+Changes
+ * The TLS 1.3 protocol is now enabled in the default configuration.
diff --git a/include/mbedtls/mbedtls_config.h b/include/mbedtls/mbedtls_config.h
index cf6d406..b9790b9 100644
--- a/include/mbedtls/mbedtls_config.h
+++ b/include/mbedtls/mbedtls_config.h
@@ -1774,7 +1774,7 @@
*
* Uncomment this macro to enable the support for TLS 1.3.
*/
-//#define MBEDTLS_SSL_PROTO_TLS1_3
+#define MBEDTLS_SSL_PROTO_TLS1_3
/**
* \def MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
@@ -1796,7 +1796,7 @@
* effect on the build.
*
*/
-//#define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
+#define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
/**
* \def MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED