Ronald Cron | c3e9abe | 2022-06-17 17:23:06 +0200 | [diff] [blame^] | 1 | Security |
2 | * Fix check of certificate key usage in TLS 1.3. The usage of the public key | ||||
3 | provided by a client or server certificate for authentication was not | ||||
4 | checked properly when validating the certificate. This could cause a | ||||
5 | client or server to be able to authenticate itself through a certificate | ||||
6 | to an Mbed TLS TLS 1.3 server or client while it does not own a proper | ||||
7 | certificate to do so. |