Migration guide added and ChangeLog clarified

Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
This commit is contained in:
TRodziewicz 2021-05-14 14:07:51 +02:00
parent 102c89ed65
commit 95f8f22c27
2 changed files with 15 additions and 1 deletions

View file

@ -1,2 +1,3 @@
Removals
* Remove the MBEDTLS_SSL_RECORD_CHECKING option. Fixes #4361.
* Remove the MBEDTLS_SSL_RECORD_CHECKING option and enable by default its
previous action. Fixes #4361.

View file

@ -0,0 +1,13 @@
Remove MBEDTLS_SSL_RECORD_CHECKING option and enable its action by default
--------------------------------------------------------------------------
This change does not affects users who use the default config.h, as the
option MBEDTLS_SSL_RECORD_CHECKING was already on by default.
This option was added only to controls compilation of one function
(mbedtls_ssl_check_record()) used in DTLS to check a buffer's validity and
authenticity. Switching it off poses a security risk.
For users who changed the default setting of the option there is no real path
of migration.