From 8b223b650991182ff288140b5f8b3a1d4832981d Mon Sep 17 00:00:00 2001 From: TRodziewicz Date: Wed, 2 Jun 2021 16:42:39 +0200 Subject: [PATCH] Addition of the migration guide entry file. Signed-off-by: TRodziewicz --- ...T_CLIENT_PREFERENCE_config_opt_to_runtime_opt.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 docs/3.0-migration-guide.d/turn_SSL_SRV_RESPECT_CLIENT_PREFERENCE_config_opt_to_runtime_opt.md diff --git a/docs/3.0-migration-guide.d/turn_SSL_SRV_RESPECT_CLIENT_PREFERENCE_config_opt_to_runtime_opt.md b/docs/3.0-migration-guide.d/turn_SSL_SRV_RESPECT_CLIENT_PREFERENCE_config_opt_to_runtime_opt.md new file mode 100644 index 000000000..6b1db9e62 --- /dev/null +++ b/docs/3.0-migration-guide.d/turn_SSL_SRV_RESPECT_CLIENT_PREFERENCE_config_opt_to_runtime_opt.md @@ -0,0 +1,13 @@ +Turn MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE configuration option into a runtime option +-- + +This change affects users who see the change of the SSL server vs. client +preferred set of ciphersuites in runtime useful. + +The `MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE` `config.h` option has been +removed and a new function with similar functionality has been introduced into the +SSL API. + +This new function `mbedtls_ssl_conf_respect_client_preference()` can be used to +change the preferred set of ciphersuites on the server to those used on the client. +The default state is to use the server set of suites.