commit c3af2f48c4aa63df3b077a26990ea83c8c6f81b1
author Gilles Peskine <Gilles.Peskine@arm.com> Tue Mar 11 13:47:14 2025 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> Wed Mar 12 10:55:11 2025 +0100
tree b5f1373e9aa5ba94ea4cedcfa18cabaf1e264733
parent 494e4943b539c070374d97af6328bdd251133bbc

ClientHello may be fragmented in renegotiation

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

include/mbedtls/ssl.h

diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h
index 26b1fd4..4d2410e 100644
--- a/include/mbedtls/ssl.h
+++ b/include/mbedtls/ssl.h
@@ -4993,8 +4993,6 @@
  *                   that #MBEDTLS_SSL_PROTO_TLS1_3 enabled, and the
  *                   accepted versions have not been restricted with
  *                   mbedtls_ssl_conf_max_tls_version() or the like).
- *                 - A ClientHello message that initiates a renegotiation
- *                   must not be fragmented.
  *                 - The first fragment of a handshake message must be
  *                   at least 4 bytes long.
  *                 - Non-handshake records must not be interleaved between