commit 27eb68d29588937741ed89fd4f395a37c20b2ac6
author Ronald Cron <ronald.cron@arm.com> Fri Mar 15 16:13:37 2024 +0100
committer Ronald Cron <ronald.cron@arm.com> Mon Mar 18 13:06:59 2024 +0100
tree edc652a5a6cd76f3e621e645860b02e3f8d3b1bb
parent 47f8d0e840a5ab0179c5b90fbecf4609ef896268

Enable TLS 1.3 by default

Signed-off-by: Ronald Cron <ronald.cron@arm.com>

ChangeLog.d/enable-tls13-by-default.txt

diff --git a/ChangeLog.d/enable-tls13-by-default.txt b/ChangeLog.d/enable-tls13-by-default.txt
new file mode 100644
index 0000000..636078c
--- /dev/null
+++ b/ChangeLog.d/enable-tls13-by-default.txt
@@ -0,0 +1,2 @@
+Changes
+   * The TLS 1.3 protocol is now enabled in the default configuration.

include/mbedtls/mbedtls_config.h

diff --git a/include/mbedtls/mbedtls_config.h b/include/mbedtls/mbedtls_config.h
index cf6d406..b9790b9 100644
--- a/include/mbedtls/mbedtls_config.h
+++ b/include/mbedtls/mbedtls_config.h
@@ -1774,7 +1774,7 @@
  *
  * Uncomment this macro to enable the support for TLS 1.3.
  */
-//#define MBEDTLS_SSL_PROTO_TLS1_3
+#define MBEDTLS_SSL_PROTO_TLS1_3
 
 /**
  * \def MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
@@ -1796,7 +1796,7 @@
  * effect on the build.
  *
  */
-//#define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
+#define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
 
 /**
  * \def MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED