mbedtls
mbedtls copied to clipboard
Remove all deprecated items
As per https://github.com/Mbed-TLS/mbedtls/issues/6792#issuecomment-1531159865
- [ ] mbedtls_asn1_free_named_data() -> use mbedtls_asn1_free_named_data_list() or mbedtls_asn1_free_named_data_list_shallow() instead
- [x]
mbedtls_asn1_write_algorithm_identifier()→ usembedtls_asn1_write_algorithm_identifier_ext()instead: https://github.com/Mbed-TLS/mbedtls/issues/7963 - [x]
MBEDTLS_PSA_CRYPTO_SE_C→ use the unified driver interface instead https://github.com/Mbed-TLS/mbedtls/issues/8151 - [ ] MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT -> let's only support the standard version
- [ ] mbedtls_cipher_setup_psa() -> let's see how that evolves with driver-only ciphers work
- [ ] compat-2.x.h -> just remove
- [ ] mbedtls_pkcs5_pbkdf2_hmac() -> use mbedtls_pkcs5_pbkdf2_hmac_ext() instead (of the PSA Crypto API)
- [ ] mbedtls_ssl_conf_curves() -> use mbedtls_ssl_conf_groups() instead
- [ ] mbedtls_ssl_conf_max/min_version() -> use mbedtls_ssl_conf_max/min_tls_version() instead
- [ ] mbedtls_x509write_crt_set_serial() -> use mbedtls_x509write_crt_set_serial_raw() instead
Also:
- [ ] review after release of 3.6 LTS for any other deprecations not mentioned above
review after release of 3.6 LTS for any other deprecations not mentioned above
Note: some functions* use MBEDTLS_DEPRECATED but not \deprecated (and perhaps the other way round happens as well), so we should be careful to use multiple methods when looking for deprecated items.
- I'm thinking about
mbedtls_ssl_conf_sig_hashes()here. Done: https://github.com/Mbed-TLS/mbedtls/pull/10298
The pre-.0 part has been done, and I've filed separate issues for the post-.0 parts: https://github.com/Mbed-TLS/mbedtls/issues/10429 and https://github.com/Mbed-TLS/TF-PSA-Crypto/issues/486