Update mbedTLS to 2.1.2

Looks like it's time to update. They have found a bunch of security problems by themselves.

Even if we don't make use of ticket reuse or any of the other problematic modules, and the only thing that could affect our schannel implementation theoretically is the lack of sizeof(hostname) < 255 bounds checking.

Anyway, updating a library like this is always a good idea.

References:

• https://tls.mbed.org/tech-updates/releases/mbedtls-2.1.2-and-1.3.14-and-polarssl-1.2.17-released
• https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2015-01

Used package: https://tls.mbed.org/download/mbedtls-2.1.2-apache.tgz with SHA-1 c99dfeaa27489f0e74e704e69a181f6ceb3db2a7.

–

aminekhaldi: Subscribing to their mailing list for updates might be also a good idea, just in case: https://tls.mbed.org/subscribe