Gilles Peskine 39957503c5 Remove secp256k1 from the default X.509 and TLS profiles ...

For TLS, secp256k1 is deprecated by RFC 8422 §5.1.1. For X.509,
secp256k1 is not deprecated, but it isn't used in practice, especially
in the context of TLS where there isn't much point in having an X.509
certificate which most peers do not support. So remove it from the
default profile. We can add it back later if there is demand.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

2021-06-17 23:17:52 +02:00

..

00README

Quit using title case for entry titles

2021-05-04 13:06:34 +02:00

ccm-alt.md

Add migration guide for developers of CCM alternative implementation

2021-06-01 09:07:46 +02:00

cipher-delayed-output.md

Fix some typos

2021-06-01 09:40:53 +02:00

combine_SSL_CID-TLS1_3_PADDING_GRANULARITY_options.md

Adding removed defines to check_config.h and fixing the migration guide entry.

2021-05-31 12:58:25 +02:00

csr-add-critical-extension.md

Expose flag for critical extensions

2021-05-27 14:27:43 +02:00

default-curves.md

Remove secp256k1 from the default X.509 and TLS profiles

2021-06-17 23:17:52 +02:00

gcm-alt.md

Add migration guides for GCM

2021-05-20 11:51:46 +02:00

gcm-multipart.md

Reorder the text to say who is affected first

2021-05-20 12:11:19 +02:00

max-record-payload-api.md

Add migration guide

2021-05-23 06:03:55 +01:00

modify_MBEDTLS_ECP_FIXED_POINT_OPTIM_behaviour.md

fix comment, ChangeLog & migration-guide for MBEDTLS_ECP_FIXED_POINT_OPTIM

2021-06-03 15:47:40 +08:00

modify_SHA384_option_behaviour.md

Improve migration guide for SHA384 option

2021-05-20 13:52:48 +02:00

relaxed-psk-semantics.md

Fix typo in migration guide

2021-05-28 09:54:31 +01:00

Remove_3DES_ciphersuites.md

Remove 3DES ciphersuites

2021-05-31 12:11:53 +02:00

remove_deprecated_functions_and_constants.md

Fix migration guide for now-removed deprecated functions

2021-06-08 07:50:55 +01:00

remove_mbedtls_check_params_option.md

Changes after code review

2021-05-27 17:34:14 +02:00

remove_MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION.md

Correction to the migr. guide wording and removal of not needed option

2021-06-09 13:31:42 +02:00

remove_MBEDTLS_X509_CHECK_x_KEY_USAGE_options.md

Correction to the migration guide entry wording

2021-06-09 16:54:20 +02:00

remove_SSL_DTLS_BADMAC_LIMIT_option.md

Addition of the migration guide entry.

2021-05-26 15:29:36 +02:00

remove_ssl_record_checking.md

New line added at the end of the migration guide entry

2021-05-17 11:16:52 +02:00

remove_supp_for_extensions_in_pre-v3_X_509_certs.md

Changing the migration guide entry wording.

2021-05-31 13:12:16 +02:00

remove_support_for_tls_1.0_1.1_and_dtls_1.0.md

Editorial improvements

2021-06-07 12:00:04 +02:00

remove-enable-weak-ciphersuites.md

Add change log and migration guide

2021-05-04 15:59:10 +02:00

remove-max-content-len.md

Remove MBEDTLS_SSL_MAX_CONTENT_LEN option

2021-05-10 17:02:48 +01:00

remove-null-entropy.md

Provide more in-depth migration guide after removal of null entropy.

2021-05-19 16:35:51 +02:00

remove-rsa-mode-parameter.md

Corrections to ChangeLog and Migration guide

2021-05-25 15:00:19 +01:00

rename_the__ret_functions.md

Corrections to the docs wording and changes to aux scripts

2021-06-15 00:18:32 +02:00

rsa-padding.md

Improve migration guide

2021-06-09 10:54:14 +02:00

separate_SHA224_from_SHA256.md

Add migration guide for SHA384 and SHA224 options.

2021-05-19 13:22:53 +02:00

session-cache-api.md

Add migration guide

2021-05-18 05:27:18 +01:00

sha512-output-type.md

Change sha256 output type from an array to a pointer

2021-05-13 00:46:29 +02:00

ssl-error-code-cleanup.md

Add migration guide

2021-05-14 17:10:27 +01:00

turn_SSL_SRV_RESPECT_CLIENT_PREFERENCE_config_opt_to_runtime_opt.md

Correction according to code review (function and param. names change

2021-06-14 13:46:21 +02:00