commit b63dd8c3ad6ead0ea6b5b710d5437407cd8f6dc0
author Daniel Boulby <daniel.boulby@arm.com> Fri Sep 23 11:55:20 2022 +0100
committer Manish V Badarkhe <manish.badarkhe@arm.com> Fri Oct 28 15:55:26 2022 +0200
tree e842a2ddef75929552fae71debb5079dbbbb4d67
parent 0a2dd1e5cbb4d4651ec0e020b120328096ec21a7

upgrade to Mbed TLS 2.28.1

In anticipation of the next Trusted Firmware release update to the
newest 2.x Mbed TLS library.

Note that the Mbed TLS project publised version 3.x some time ago.
However, as this is a major release with API breakages, upgrading to
this one might require some more involved changes in TF-A, which we
are not ready to do. We shall upgrade to Mbed TLS 3.x after the v2.8
release of TF-A.

Also remove setting mbedtls_archive in arm-env.sh to tfa_downloads since
we now rely less and less on the Internal CI so having a local copy of
Mbed TLS on arm internal servers is no longer required.

Signed-off-by: Daniel Boulby <daniel.boulby@arm.com>
Change-Id: Ifce20bb716a2fa9ab089dde4bc2bf1cfeadf178d

arm-env.sh

diff --git a/arm-env.sh b/arm-env.sh
index 11c7967..efdac7b 100644
--- a/arm-env.sh
+++ b/arm-env.sh
@@ -24,9 +24,6 @@
 scp_tools_src_repo_url="${scp_tools_src_repo_url:-http://$arm_gerrit_url/scp/tools-non-public}"
 tf_for_scp_tools_src_repo_url="https://gerrit.oss.arm.com/scp/test-framework"
 
-# If not set, the scripts would download the tarball from Github every time.
-mbedtls_archive="${mbedtls_archive:-$tfa_downloads/mbedtls/mbedtls-2.28.0.tar.gz}"
-
 # Arm Coverity server.
 export coverity_host="${coverity_host:-coverity.cambridge.arm.com}"
 export coverity_port="${coverity_port:-8443}"

script/tf-coverity/common-def.sh

diff --git a/script/tf-coverity/common-def.sh b/script/tf-coverity/common-def.sh
index 82f391e..249d4ed 100644
--- a/script/tf-coverity/common-def.sh
+++ b/script/tf-coverity/common-def.sh
@@ -80,7 +80,7 @@
 
 # mbed TLS source tag to checkout when building Trusted Firmware with
 # cryptography support (e.g. for Trusted Board Boot feature).
-MBED_TLS_SOURCES_TAG="mbedtls-2.28.0"
+MBED_TLS_SOURCES_TAG="mbedtls-2.28.1"
 
 ARMCLANG_PATH="$(set_armclang_toolchain)"
 

utils.sh

diff --git a/utils.sh b/utils.sh
index 1c5c442..a981f68 100644
--- a/utils.sh
+++ b/utils.sh
@@ -385,7 +385,7 @@
 
 linaro_2001_release="${linaro_2001_release:-$tfa_downloads/linaro/20.01}"
 linaro_release="${linaro_release:-$linaro_2001_release}"
-mbedtls_version="${mbedtls_version:-2.28.0}"
+mbedtls_version="${mbedtls_version:-2.28.1}"
 
 # mbedTLS archive public hosting available at github.com
 mbedtls_archive="${mbedtls_archive:-https://github.com/Mbed-TLS/mbedtls/archive/refs/tags/v${mbedtls_version}.tar.gz}"