Mbed TLS 3.6.7 SDK

Mbed TLS 3.6.7 for AROS x86_64 (ABIv11), port revision aros2
------------------------------------------------------------

Static link libraries of Mbed TLS 3.6.7 (long-term support branch) for
developers building programs for AROS x86_64 with ABIv11, such as AROS One.
These binaries are not for mainline AROS (ABIv1), i386 or
aarch64. There is no shared .library; programs link the libraries in.

Contents:

  lib/libmbedcrypto.a, libmbedx509.a, libmbedtls.a
  lib/libmbedtls_aros.a    the AROS time functions the configuration needs
  include/                 upstream headers and mbedtls_aros_config.h
  examples/https_get.c     a minimal HTTPS example: entropy initialization,
                           CA bundle, certificate and host name verification
  src/                     platform file, source list, build script
  README.txt, BUILD.txt, LICENSE, LICENSE.port

A TLS client profile, not the full upstream configuration: TLS 1.2 and 1.3,
client side only, ECDHE with RSA and ECDSA certificates, AES-GCM and
ChaCha20-Poly1305, X.509 verification. Programs must be compiled with
-DMBEDTLS_CONFIG_FILE="<mbedtls_aros_config.h>".

The configuration takes entropy from mbedtls_hardware_poll(), which the
program must provide. The companion archive
jitterentropy.x86_64-aros-v11.zip supplies a ready-to-link jitterentropy
backend and the Mbed TLS adapter. Applications can instead provide their
own suitable entropy backend. Source failures are reported to the caller.

The toolchain is needed on the development host, not on the user's AROS
machine. Programs contain the linked code; no separate TLS .library is
installed. The example needs a working bsdsocket.library network stack and
a CA bundle. It demonstrates TLS integration, not a general-purpose HTTP
downloader; see the included source and README.txt for usage.

Link order:

  -lmbedtls -lmbedx509 -lmbedcrypto -lmbedtls_aros
  -ljitterentropy_mbedtls -ljitterentropy

Tested on AROS One 1.3 x86_64 under QEMU with the example built only from
the two SDK archives plus the toolchain: a TLS 1.3 connection with a verified
certificate,
and refusal of expired, wrong-host, untrusted and self-signed certificates.
Not tested on real hardware or other ABIv11 systems. This is a build and a
working example, not an audit or a certification.

License: upstream Mbed TLS is Apache-2.0 OR GPL-2.0-or-later; our port
files are MIT. Full terms are included in LICENSE and LICENSE.port.

Upstream sources are unchanged (release 3.6.7, SHA-256 in README.txt).
Source snapshot and build instructions:
https://github.com/tomaszstaniak/arospkg/tree/208dc3698092855fc7d653403c89d6b0b5
9b3dc7/sdk
Test reports are under docs/reports/ in the same repository. README.txt
explains how to rebuild.

These packages make the AROS ports developed for arospkg available to other
developers. Source changes, build scripts and examples are included. No
regular update schedule is promised; contributions and upstream integration
are welcome. Applications linking these libraries remain responsible for
tracking relevant upstream security updates and rebuilding when necessary.

SHA-256 of this archive:
03e6cc28798628cc16bbb5fb080f9025570db710c439d041ca73a95c95cf10a9