commit be3a4406d2a209c6f030df02f404588f61058255
author Andres Amaya Garcia <andres.amayagarcia@arm.com> Wed Dec 05 20:37:20 2018 +0000
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Wed Jan 29 09:38:31 2020 +0100
tree f3a979b33051bd64e6896dabb612fb0486727728
parent c0c92fea3d105519a03a0cd1c5aa9f4f6093ab08

Deprecate MBEDTLS_PKCS11_C feature

include/mbedtls/check_config.h

diff --git a/include/mbedtls/check_config.h b/include/mbedtls/check_config.h
index 6ebe6b7..c7b6e4e 100644
--- a/include/mbedtls/check_config.h
+++ b/include/mbedtls/check_config.h
@@ -774,6 +774,14 @@
 #error "MBEDTLS_HAVE_INT32/MBEDTLS_HAVE_INT64 and MBEDTLS_HAVE_ASM cannot be defined simultaneously"
 #endif /* (MBEDTLS_HAVE_INT32 || MBEDTLS_HAVE_INT64) && MBEDTLS_HAVE_ASM */
 
+#if defined(MBEDTLS_PKCS11_C)
+#if defined(MBEDTLS_DEPRECATED_REMOVED)
+#error "MBEDTLS_PKCS11_C is deprecated and will likely be removed in a future version of Mbed TLS"
+#elif defined(MBEDTLS_DEPRECATED_WARNING)
+#warning "MBEDTLS_PKCS11_C is deprecated and will likely be removed in a future version of Mbed TLS"
+#endif
+#endif /* MBEDTLS_PKCS11_C */
+
 /*
  * Avoid warning from -pedantic. This is a convenient place for this
  * workaround since this is included by every single file before the

include/mbedtls/config.h

diff --git a/include/mbedtls/config.h b/include/mbedtls/config.h
index 058969b..789ba5b 100644
--- a/include/mbedtls/config.h
+++ b/include/mbedtls/config.h
@@ -2814,6 +2814,9 @@
  *
  * Enable wrapper for PKCS#11 smartcard support.
  *
+ * \deprecated This option is deprecated and will likely be removed in a
+ *             future version of Mbed TLS.
+ *
  * Module:  library/pkcs11.c
  * Caller:  library/pk.c
  *