| Features | |
| * Support rsa_pss_rsae_* signature algorithms in TLS 1.2. | |
| Bugfix | |
| * Fix an interoperability failure between an Mbed TLS client with both | |
| TLS 1.2 and TLS 1.3 support, and a TLS 1.2 server that supports | |
| rsa_pss_rsae_* signature algorithms. This failed because Mbed TLS | |
| advertised support for PSS in both TLS 1.2 and 1.3, but only | |
| actually supported PSS in TLS 1.3. |