| Gilles Peskine | 3758fd6 | 2021-06-02 00:07:17 +0200 | [diff] [blame] | 1 | Default behavior changes |
| 2 | * Some default policies for X.509 certificate verification and TLS have |
| 3 | changed: curves and hashes weaker than 255 bits are no longer accepted |
| Gilles Peskine | b1940a7 | 2021-06-02 15:18:12 +0200 | [diff] [blame] | 4 | by default. The default order in TLS now favors faster curves over larger |
| 5 | curves. |
| Gilles Peskine | 3758fd6 | 2021-06-02 00:07:17 +0200 | [diff] [blame] | 6 | |
| 7 | Removals |
| 8 | * Remove the compile-time option |
| 9 | MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE. |