Diff: mqtt_client_demo/src/tls_config.h

Revision:

0:8918a71cdbe9

diff -r 000000000000 -r 8918a71cdbe9 mqtt_client_demo/src/tls_config.h
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/mqtt_client_demo/src/tls_config.h	Sat Feb 04 18:15:49 2017 +0000
@@ -0,0 +1,161 @@
+/**
+ * @file tls_config.h
+ * @brief CycloneSSL configuration file
+ *
+ * @section License
+ *
+ * Copyright (C) 2010-2017 Oryx Embedded SARL. All rights reserved.
+ *
+ * This file is part of CycloneSSL Open.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software Foundation,
+ * Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
+ *
+ * @author Oryx Embedded SARL (www.oryx-embedded.com)
+ * @version 1.7.6
+ **/
+
+#ifndef _TLS_CONFIG_H
+#define _TLS_CONFIG_H
+
+//Desired trace level (for debugging purposes)
+#define TLS_TRACE_LEVEL TRACE_LEVEL_INFO
+
+//Enable SSL/TLS support
+#define TLS_SUPPORT ENABLED
+//Client mode of operation
+#define TLS_CLIENT_SUPPORT ENABLED
+//Server mode of operation
+#define TLS_SERVER_SUPPORT DISABLED
+
+//Minimum version that can be negotiated
+#define TLS_MIN_VERSION SSL_VERSION_3_0
+//Maximum version that can be negotiated
+#define TLS_MAX_VERSION TLS_VERSION_1_2
+
+//Session resumption mechanism
+#define TLS_SESSION_RESUME_SUPPORT ENABLED
+//Lifetime of session cache entries
+#define TLS_SESSION_CACHE_LIFETIME 3600000
+
+//SNI (Server Name Indication) extension
+#define TLS_SNI_SUPPORT ENABLED
+//ALPN (Application-Layer Protocol Negotiation) extension
+#define TLS_ALPN_SUPPORT DISABLED
+
+//Maximum number of certificates the end entity can load
+#define TLS_MAX_CERTIFICATES 3
+
+//RSA key exchange support
+#define TLS_RSA_SUPPORT ENABLED
+//DHE_RSA key exchange support
+#define TLS_DHE_RSA_SUPPORT DISABLED
+//DHE_DSS key exchange support
+#define TLS_DHE_DSS_SUPPORT DISABLED
+//DH_anon key exchange support
+#define TLS_DH_ANON_SUPPORT DISABLED
+//ECDHE_RSA key exchange support
+#define TLS_ECDHE_RSA_SUPPORT ENABLED
+//ECDHE_ECDSA key exchange support
+#define TLS_ECDHE_ECDSA_SUPPORT DISABLED
+//ECDH_anon key exchange support
+#define TLS_ECDH_ANON_SUPPORT DISABLED
+//PSK key exchange support
+#define TLS_PSK_SUPPORT DISABLED
+//RSA_PSK key exchange support
+#define TLS_RSA_PSK_SUPPORT DISABLED
+//DHE_PSK key exchange support
+#define TLS_DHE_PSK_SUPPORT DISABLED
+//ECDHE_PSK key exchange support
+#define TLS_ECDHE_PSK_SUPPORT DISABLED
+
+//RSA signature capability
+#define TLS_RSA_SIGN_SUPPORT ENABLED
+//DSA signature capability
+#define TLS_DSA_SIGN_SUPPORT ENABLED
+//ECDSA signature capability
+#define TLS_ECDSA_SIGN_SUPPORT ENABLED
+
+//Stream cipher support
+#define TLS_STREAM_CIPHER_SUPPORT ENABLED
+//CBC block cipher support
+#define TLS_CBC_CIPHER_SUPPORT ENABLED
+//CCM AEAD support
+#define TLS_CCM_CIPHER_SUPPORT ENABLED
+//GCM AEAD support
+#define TLS_GCM_CIPHER_SUPPORT ENABLED
+//ChaCha20Poly1305 AEAD support
+#define TLS_CHACHA20_POLY1305_SUPPORT ENABLED
+
+//RC4 cipher support
+#define TLS_RC4_SUPPORT ENABLED
+//IDEA cipher support
+#define TLS_IDEA_SUPPORT DISABLED
+//DES cipher support
+#define TLS_DES_SUPPORT DISABLED
+//Triple DES cipher support
+#define TLS_3DES_SUPPORT ENABLED
+//AES cipher support
+#define TLS_AES_SUPPORT ENABLED
+//Camellia cipher support
+#define TLS_CAMELLIA_SUPPORT ENABLED
+//SEED cipher support
+#define TLS_SEED_SUPPORT ENABLED
+//ARIA cipher support
+#define TLS_ARIA_SUPPORT ENABLED
+
+//MD5 hash support
+#define TLS_MD5_SUPPORT ENABLED
+//SHA-1 hash support
+#define TLS_SHA1_SUPPORT ENABLED
+//SHA-224 hash support
+#define TLS_SHA224_SUPPORT ENABLED
+//SHA-256 hash support
+#define TLS_SHA256_SUPPORT ENABLED
+//SHA-384 hash support
+#define TLS_SHA384_SUPPORT ENABLED
+//SHA-512 hash support
+#define TLS_SHA512_SUPPORT ENABLED
+
+//secp160k1 elliptic curve support
+#define TLS_SECP160K1_SUPPORT DISABLED
+//secp160r1 elliptic curve support
+#define TLS_SECP160R1_SUPPORT DISABLED
+//secp160r2 elliptic curve support
+#define TLS_SECP160R2_SUPPORT DISABLED
+//secp192k1 elliptic curve support
+#define TLS_SECP192K1_SUPPORT DISABLED
+//secp192r1 elliptic curve support
+#define TLS_SECP192R1_SUPPORT ENABLED
+//secp224k1 elliptic curve support
+#define TLS_SECP224K1_SUPPORT DISABLED
+//secp224r1 elliptic curve support
+#define TLS_SECP224R1_SUPPORT ENABLED
+//secp256k1 elliptic curve support
+#define TLS_SECP256K1_SUPPORT DISABLED
+//secp256r1 elliptic curve support
+#define TLS_SECP256R1_SUPPORT ENABLED
+//secp384r1 elliptic curve support
+#define TLS_SECP384R1_SUPPORT ENABLED
+//secp521r1 elliptic curve support
+#define TLS_SECP521R1_SUPPORT DISABLED
+//brainpoolP256r1 elliptic curve support
+#define TLS_BRAINPOOLP256R1_SUPPORT DISABLED
+//brainpoolP384r1 elliptic curve support
+#define TLS_BRAINPOOLP384R1_SUPPORT DISABLED
+//brainpoolP512r1 elliptic curve support
+#define TLS_BRAINPOOLP512R1_SUPPORT DISABLED
+
+#endif
+