Mbedtls 3.4.0

[Taowyoo]

Upgrade to C mbedtls 3.4.0

Summary

This issue track the progress of:

• Update vendor mbedtls to 3.4.0 with server side version negotiation TLS: TLS 1.2 / 1.3 version negotiation on server side Mbed-TLS/mbedtls#7288
• Update rust-mbedtls to sync with changes in mbedtls 3.4.0
  • Add TLS 1.3 API
  • Add tests for TLS 1.3
  • Sync API changes for other functions
  • Sync changes with feature add/remove

Change list

Changes in mbedtls-sys

Cargo.toml change

• features

  • zlib: support for TLS record-level compression is removed in mbedtls 3.X

    • Related options removed: MBEDTLS_ZLIB_SUPPORT

  • legacy_protocols: all protocal early than TLS 1.2 is removed in mbedtls 3.X

    • Related options removed: MBEDTLS_SSL_PROTO_SSL3, MBEDTLS_SSL_PROTO_TLS1, MBEDTLS_SSL_PROTO_TLS1_1, MBEDTLS_SSL_CBC_RECORD_SPLITTING

  • pkcs11: wrapper for libpkcs11-helper is removed in mbedtls 3.X

  • mpi_force_c_code: just removed, seems something specific to our usage

• dependencies
  • A lot of version upgrade

Config/defines change

According to 3.0-migration-guide.md:

• Output config file name changed from config.h to mbedtls_config.h

• Do not define MBEDTLS_CONFIG_H in mbedtls_config.h

• Do not #include <mbedtls/check_config.h>

Changes unchecked

• MBEDTLS_CUSTOM_HAS_AESNI and MBEDTLS_CUSTOM_HAS_PADLOCK removed in mbedtls 3.X code base

Changes in mbedtls

Cargo.toml change

• features
  • mpi_force_c_code, zlib, legacy_protocols removed to sync with changes in mbedtls-sys
• dependencies
  • A lot of version upgrade

Code changes

• Add prefix private_ to a lot of fields of mbedtls types
• Removed and added some options in Error, self_tests, CipherType, CipherMode and CipherSuite to sync with changes in mbedtls 3.X
• Provide random number generator for fn EcPoint::mul
• Removed Md2 and Md4 since they are no longer supported in mbedtls 3.X
• Remove CustomPk
• Add TLS1_3SignatureAlgorithms, since TLS 1.3 need to explicitly config Signature Algorithms when building with both TLS1.2 and TLS 1.3 flags
• Update tests accordingly