Forum

Hello,

i have installed the Webserver from the actual sources, but the Hiawatha Monitor says:
Version: Hiawatha v10.3, cache, IPv6, Monitor, reverse proxy, TLS v2.2.1, Tomahawk, URL toolkit, XSLT
Up to date: yes (mbed TLS out of date)
Why is mbed TLS out of date?

Hugo already mention in weblog to patch mbed TLS to 2.3.0.
For instruction, you can follow https://www.hiawatha-webserver.org/weblog/114

Ok, it's a workaround.
But I don't understand why this patch is not integrated in the actual source tarball?

It's not a workaround. mbed TLS is an external library. I'm not going to release a new Hiawatha version every time mbed TLS releases a new version. That's why I included a script in the Hiawatha source package to update the mbed TLS library.

That's normally correct, but in this case a change in the source code of the webserver is required. And don't forget please, that many people take the precompiled package from tuxhelp or sparkz repo and there is no way to patch without recompile. But that's your decision