Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove all deprecated items #8138

Open
2 of 11 tasks
daverodgman opened this issue Aug 30, 2023 · 1 comment
Open
2 of 11 tasks

Remove all deprecated items #8138

daverodgman opened this issue Aug 30, 2023 · 1 comment
Labels
api-break This issue/PR breaks the API and must wait for a new major version

Comments

@daverodgman
Copy link
Contributor

daverodgman commented Aug 30, 2023

As per #6792 (comment)

  • mbedtls_asn1_free_named_data() -> use mbedtls_asn1_free_named_data_list() or mbedtls_asn1_free_named_data_list_shallow() instead
  • mbedtls_asn1_write_algorithm_identifier() → use mbedtls_asn1_write_algorithm_identifier_ext() instead: Deprecate mbedtls_asn1_write_algorithm_identifier #7963
  • MBEDTLS_PSA_CRYPTO_SE_C → use the unified driver interface instead Remove the dynamic SE interface in 4.0 #8151
  • MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT -> let's only support the standard version
  • mbedtls_cipher_setup_psa() -> let's see how that evolves with driver-only ciphers work
  • compat-2.x.h -> just remove
  • mbedtls_pkcs5_pbkdf2_hmac() -> use mbedtls_pkcs5_pbkdf2_hmac_ext() instead (of the PSA Crypto API)
  • mbedtls_ssl_conf_curves() -> use mbedtls_ssl_conf_groups() instead
  • mbedtls_ssl_conf_max/min_version() -> use mbedtls_ssl_conf_max/min_tls_version() instead
  • mbedtls_x509write_crt_set_serial() -> use mbedtls_x509write_crt_set_serial_raw() instead

Also:

  • review after release of 3.6 LTS for any other deprecations not mentioned above
@daverodgman daverodgman added the api-break This issue/PR breaks the API and must wait for a new major version label Aug 30, 2023
@mpg
Copy link
Contributor

mpg commented Oct 27, 2023

review after release of 3.6 LTS for any other deprecations not mentioned above

Note: some functions* use MBEDTLS_DEPRECATED but not \deprecated (and perhaps the other way round happens as well), so we should be careful to use multiple methods when looking for deprecated items.

  • I'm thinking about mbedtls_ssl_conf_sig_hashes() here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
api-break This issue/PR breaks the API and must wait for a new major version
Projects
Status: Mbed TLS 4.0 SHOULD
Status: Planning needed
Status: No status
Development

No branches or pull requests

2 participants