Correction according to code review (function and param. names change

and docs rewording)

Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
This commit is contained in:
TRodziewicz 2021-06-14 12:11:18 +02:00
parent 8b223b6509
commit 3946f79cab
5 changed files with 29 additions and 31 deletions

View file

@ -1,13 +1,14 @@
Turn MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE configuration option into a runtime option
--
This change affects users who see the change of the SSL server vs. client
preferred set of ciphersuites in runtime useful.
This change affects users who were enabling MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE
option in the `config.h`
The `MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE` `config.h` option has been
removed and a new function with similar functionality has been introduced into the
SSL API.
This option has been removed and a new function with similar functionality has
been introduced into the SSL API.
This new function `mbedtls_ssl_conf_respect_client_preference()` can be used to
change the preferred set of ciphersuites on the server to those used on the client.
The default state is to use the server set of suites.
This new function `mbedtls_ssl_conf_preference_order()` can be used to
change the preferred order of ciphersuites on the server to those used on the client,
e.g.: `mbedtls_ssl_conf_preference_order(ssl_config, MBEDTLS_SSL_SRV_CIPHERSUITE_ORDER_CLIENT)`
has the same effect as enabling the removed option. The default state is to use
the server order of suites.