Improve Changelog for TLS alert codes

Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
This commit is contained in:
Dave Rodgman 2021-06-29 14:43:09 +01:00
parent dd5f624f32
commit de8c91bbae

View file

@ -1,6 +1,5 @@
Bugfix
* Fix the alert raised when a client requests an invalid
* fragment length, as per RFC6066 section 4. We now alert with
* MBEDTLS_SSL_ALERT_MSG_ILLEGAL_PARAMETER. Similarly, raise
* MBEDTLS_SSL_ALERT_MSG_DECRYPT_ERROR for an invalid finished
* message, as per RFC5247 section 7.2.2.
* Fix which alert is sent in some cases to conform to the
applicable RFC: on an invalid Finished message value, an
invalid max_fragment_length extension, or an
unsupported extension used by the server.