Mbed TLS

Platform/MbedTls/ wraps Mbed TLS for TLS transport and keyed at-rest crypto on embedded targets (Mbed TLS documentation).

Fills the Stream role with TLS, and the SecurityPolicy role for at-rest integrity.

What it ships

Class	Role
SolidSyslogMbedTlsStream	TLS stream over an injected byte transport
SolidSyslogMbedTlsHmacSha256Policy	at-rest HMAC-SHA256
SolidSyslogMbedTlsAesGcmPolicy	at-rest AES-256-GCM

Requirements

Your mbedtls_config.h. You pass caller-built handles (RNG, cert chain, key), not file paths. Platform/MbedTls/Source/ never calls process-global Mbed TLS APIs (mbedtls_platform_setup, psa_crypto_init, …) — you own those, so SolidSyslog coexists with your other Mbed TLS use.

Full setup is Integrating Mbed TLS.