You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Remove uses of the legacy crypto API from ssl_server2.c. Changes needed are:
Remove the option to set custom DHM parameters with the dhm_file option. This removal is needed because the mbedtls_dhm functions are going away.
Rewrite the ssl_async_resume() function to remove the ASYNC_OP_DECRYPT operation and thereby remove the use of mbedtls_pk_sign(). This is going away anyway in Remove the RSA-decryption key exchange #9682 so there is no problem with removing it.
This task is done when ssl_server2.c no longer calls any legacy function.
Estimate: 6 Ideal Engineering Hours
The text was updated successfully, but these errors were encountered:
Regarding ssl_async_resume: we're removing RSA-decryption authentication. As part of that, the mbedtls_ssl_async_decrypt_t callback is going away. So ssl_async_resume will no longer need to handle decryption.
Part of implementing #9904
Remove uses of the legacy crypto API from
ssl_server2.c
. Changes needed are:dhm_file
option. This removal is needed because thembedtls_dhm
functions are going away.ssl_async_resume()
function to remove theASYNC_OP_DECRYPT
operation and thereby remove the use ofmbedtls_pk_sign()
. This is going away anyway in Remove the RSA-decryption key exchange #9682 so there is no problem with removing it.This task is done when
ssl_server2.c
no longer calls any legacy function.Estimate: 6 Ideal Engineering Hours
The text was updated successfully, but these errors were encountered: