From 30786da502dca961a15cf691720212c78a4c5751 Mon Sep 17 00:00:00 2001
From: Maxim Cournoyer <maxim@guixotic.coop>
Date: Mon, 29 Sep 2025 20:57:00 +0900
Subject: [PATCH] gnu: mbedtls: Update to 3.5.2.

* gnu/packages/tls.scm (mbedtls): Update to 3.5.2.
[source]: Switch to url-fetch (otherwise there are git submodules to pull).

Change-Id: I8e7402fd24049defb922a4ceae64d099abbf5bfb
---
 gnu/packages/tls.scm | 24 +++++++++++++-----------
 1 file changed, 13 insertions(+), 11 deletions(-)

diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm
index 3eeda094bd9c3c43becc8bb92d4bd26197169f61..c168037cf157530bc5eb67d971d2e38b86be01a7 100644
--- a/gnu/packages/tls.scm
+++ b/gnu/packages/tls.scm
@@ -15,7 +15,7 @@
 ;;; Copyright © 2018 Clément Lassieur <clement@lassieur.org>
 ;;; Copyright © 2019 Mathieu Othacehe <m.othacehe@gmail.com>
 ;;; Copyright © 2020, 2023, 2025 Janneke Nieuwenhuizen <janneke@gnu.org>
-;;; Copyright © 2020, 2021, 2023, 2024 Maxim Cournoyer <maxim@guixotic.coop>
+;;; Copyright © 2020, 2021, 2023-2025 Maxim Cournoyer <maxim@guixotic.coop>
 ;;; Copyright © 2021 Solene Rapenne <solene@perso.pw>
 ;;; Copyright © 2021 Brice Waegeneire <brice@waegenei.re>
 ;;; Copyright © 2021 Maxime Devos <maximedevos@telenet.be>
@@ -971,6 +971,8 @@ correct OpenSSL include path.  It is intended for use in your
 number generator")
   (license license:perl-license)))
 
+;;; TODO: No longer maintained, migrate dependents to current mbedtls v3
+;;; (which is the new LTS).
 (define-public mbedtls-lts
   (package
     (name "mbedtls")
@@ -1011,16 +1013,16 @@ coding footprint.")
   (package
     (inherit mbedtls-lts)
     (name "mbedtls")
-    (version "3.5.2")
-    (source (origin
-              (method git-fetch)
-              (uri (git-reference
-                    (url "https://github.com/ARMmbed/mbedtls")
-                    (commit (string-append "mbedtls-" version))))
-              (file-name (git-file-name name version))
-              (sha256
-               (base32
-                "1wsjrx98h74q0q4zqwsghiqvjz4aqgvigpxb9f8xjw0w4sfsclcm"))))))
+    (version "3.6.4")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "https://github.com/Mbed-TLS/mbedtls/releases"
+                           "/download/mbedtls-" version
+                           "/mbedtls-" version ".tar.bz2"))
+       (sha256
+        (base32
+         "0441cwfh3z0xnik0wsafih599s4kzyc8pnrh7s6gjg2rdj5b2dgc"))))))
 
 (define-public mbedtls-apache
   (deprecated-package "mbedtls-apache" mbedtls-lts))