tree 858a7fb9c9c0558d0ec2f7ad3a5e2bdae16deba6
parent 7b02c1f3b63de90ae009a3bd607ae7d1384ad761
author Gilles Peskine <Gilles.Peskine@arm.com> 1726227869 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1727197129 +0200

Separate accepting TLS 1.3 middlebox compatibility from sending it

The compile-time option MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE gates both
support for interoperability with a peer that uses middlebox compatibility
mode, and support for activating that mode ourselves. Change code that is
only needed for interoperability to be guarded by
MBEDTLS_SSL_TLS1_3_ACCEPT_COMPATIBILITY_MODE.

As of this commit, MBEDTLS_SSL_TLS1_3_ACCEPT_COMPATIBILITY_MODE is always
enabled: there is no way to disable it, and there are no tests with it
disabled.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>