This bug fix release patches some issues that people found in the 1.2 branch.
The most important fix is client authentication on the server side in SSL/TLS. In the previous version enabling client authentication (SSL_VERIFY_OPTIONAL or SSL_VERIFY_REQUIRED) resulted in a failed connection on the server side.
From the ChangeLog
- Added p_hw_data to ssl_context for context specific hardware acceleration data
- During verify trust-CA is only checked for expiration and CRL presence
- Fixed client authentication compatibility on server side
- Fixed dependency on POLARSSL_SHA4_C in SSL modules
Get your copy here: polarssl-1.2.2-gpl.tgz
The hashes for polarssl-1.2.2-gpl.tgz are:
SHA-1 : e5914b06094667cecab04749bfd82106bc6abb31 SHA-256: e93d488b54ef29ae448e1886e7361d9a8e3c43b7ddcc1e0e0dd00243beef554e