coffee/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-10-28 18:07:34 +08:00
Code Issues Packages Projects Releases Wiki Activity

Changelog: add PKCS#7 API and feature entries

Browse Source 
Signed-off-by: Sridhar Markonda <sridharm@linux.ibm.com>
This commit is contained in:
Sridhar Markonda 2026-08-28 09:41:30 -05:00
parent cdb531ffe3
commit a5ef02924f
1 changed files with 28 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
ChangeLog
View File

@ -1,5 +1,33 @@
Mbed TLS ChangeLog (Sorted per branch, date)
= Mbed TLS x.x.x branch released xxxx-xx-xx
API changes
* Add the public type mbedtls_pkcs7_cert and the error codes
MBEDTLS_ERR_PKCS7_CERT_VERIFY_FAILED and
MBEDTLS_ERR_PKCS7_SIGNER_CERT_NOT_FOUND.
* Add the APIs mbedtls_pkcs7_signed_data_verify_ext(),
mbedtls_pkcs7_signed_hash_verify_ext(),
mbedtls_pkcs7_get_cert_count(), and mbedtls_pkcs7_get_certs().
* Update mbedtls_pkcs7_signed_data_verify() and
mbedtls_pkcs7_signed_hash_verify() to accept a const
mbedtls_pkcs7 pointer.
* mbedtls_pkcs7_signed_data_verify() and mbedtls_pkcs7_signed_hash_verify()
now returns MBEDTLS_ERR_PKCS7_SIGNER_CERT_NOT_FOUND when the supplied
certificate does not match the signer certificate.
Features
* Add support for multiple certificates embedded in PKCS #7
SignedData structures.
* Add support for PKCS #7 signature verification using either signer
certificates embedded in the PKCS #7 structure or certificates
supplied by the application. Certificate chain validation for
PKCS #7 embedded signer certificates is also supported.
= Mbed TLS 4.2.0 branch released 2026-07-07
Features