mbedtls-3

URL: mbedtls

---

Note(s)

• 20260707: Update to v3.6.7 since this isn't a linkpac
• 20260624: This is a copypac of -r 58 from security:tls/mbedtls as v4.x isn't (yet?) compatible with lite-xl-plugin-manager.
• From v3.6.6 release -> "Mbed TLS 3.6 is a long-term support (LTS) branch. It will be supported with bug-fixes and security fixes until at least March 2027."

---

Libraries for crypto and SSL/TLS protocols --

trustedfirmware.org/mbed-tls

mbedtls implements the SSL3, TLS 1.0, 1.1 and 1.2 protocols. It supports a number of extensions such as:

• SSL Session Tickets (RFC 5077),
• Server Name Indication (SNI) (RFC 6066),
• Truncated HMAC (RFC 6066),
• Max Fragment Length (RFC 6066),
• Secure Renegotiation (RFC 5746)
• Application Layer Protocol Negotiation (ALPN).

It understands the RSA, (EC)DH(E)-RSA, (EC)DH(E)-PSK and RSA-PSK key exchanges.