MBedTLS 3.6.3 Fixes Handshake issues

This is a fix I’ve been waiting for since the switch to MBedTLS 3.6 . I have a Production Manjaro machine I’ve been unable to update since April of 2024.

MBedTLS 3.6 advertises support for TLS1.3, but doesn’t support fragmented handshakes. Sadly livestreaming to Facebook and many other services requires handshake fragmentation support if you advertise support for TLS 1.3 . So you attempt to stream, it claims TLS 1.3 is good, attempts handshake, gets confused and drops the connection. No fallback to 1.2, no good workarounds, nothing.

But they’ve been aware of this issues since late 2024 and have now finally release the fix in 3.6.3 . If can update it should fix our handshake issues and enable streaming services again.

Can we update MBedTLS to 3.6.3?

mbedtls is inherited from Arch, not packaged by Manjaro:

mbn info mbedtls -q
Branch         : archlinux
Name           : mbedtls
Version        : 3.6.2-1
Repository     : extra
Build Date     : Thu 02 Jan 2025 07:45:00 
Packager       : Maxime Gauduin <alucryd@archlinux.org>
Branch         : unstable
Name           : mbedtls
Version        : 3.6.2-1
Repository     : extra
Build Date     : Thu 02 Jan 2025 07:45:00 
Packager       : Maxime Gauduin <alucryd@archlinux.org>
Branch         : testing
Name           : mbedtls
Version        : 3.6.2-1
Repository     : extra
Build Date     : Thu 02 Jan 2025 07:45:00 
Packager       : Maxime Gauduin <alucryd@archlinux.org>
Branch         : stable
Name           : mbedtls
Version        : 3.6.2-1
Repository     : extra
Build Date     : Thu 02 Jan 2025 07:45:00 
Packager       : Maxime Gauduin <alucryd@archlinux.org>

mbn can be found in the manjaro-check-repos package

The Arch Linux - mbedtls 3.6.2-1 (x86_64) page shows that v3.6.2-1 was flagged out-of-date on 2025-03-30, so hopefully the new version isn’t too far away.

You may also get the 3.6.3 version on your system faster if you switch to Unstable branch:

sudo pacman-mirrors --api --set-branch unstable

sudo pacman-mirrors --continent && sudo pacman -Syu
3 Likes

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.