Gilles Peskine 590bdcbddf Call psa_crypto_init in the library when required for TLS 1.3: doc
For backward compatibility with Mbed TLS <=3.5.x, applications must be able
to make a TLS connection with a peer that supports both TLS 1.2 and TLS 1.3,
regardless of whether they call psa_crypto_init(). Since Mbed TLS 3.6.0,
we enable TLS 1.3 in the default configuration, so we must take care of
calling psa_crypto_init() if needed. This is a change from TLS 1.3 in
previous versions, where enabling MBEDTLS_SSL_PROTO_TLS1_3 was a user
choice and could have additional requirement.

This commit removes the compatibility-breaking requirement from the
documentation.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2024-08-25 10:44:39 +02:00
..
mbedtls Call psa_crypto_init in the library when required for TLS 1.3: doc 2024-08-25 10:44:39 +02:00
psa Merge pull request #9403 from gilles-peskine-arm/psa-keystore-dynamic-prep-3.6 2024-08-09 08:00:03 +00:00
.gitignore Rename include directory to mbedtls 2015-03-10 11:23:56 +00:00
CMakeLists.txt Update spelling "mbed TLS" to "Mbed TLS" 2023-09-12 19:18:17 +02:00