RTC auf true
features/mbedtls/importer/adjust-config.sh@2:7aab896b1a3b, 2019-03-13 (annotated)
- Committer:
- kevman
- Date:
- Wed Mar 13 11:03:24 2019 +0000
- Revision:
- 2:7aab896b1a3b
- Parent:
- 0:38ceb79fef03
2019-03-13
Who changed what in which revision?
User | Revision | Line number | New contents of line |
---|---|---|---|
kevman | 0:38ceb79fef03 | 1 | #!/bin/sh |
kevman | 0:38ceb79fef03 | 2 | # |
kevman | 0:38ceb79fef03 | 3 | # This file is part of mbed TLS (https://tls.mbed.org) |
kevman | 0:38ceb79fef03 | 4 | # |
kevman | 0:38ceb79fef03 | 5 | # Copyright (c) 2015-2016, ARM Limited, All Rights Reserved |
kevman | 0:38ceb79fef03 | 6 | # |
kevman | 0:38ceb79fef03 | 7 | # Purpose |
kevman | 0:38ceb79fef03 | 8 | # |
kevman | 0:38ceb79fef03 | 9 | # Comments and uncomments #define lines in the given configuration header file |
kevman | 0:38ceb79fef03 | 10 | # to configure the file for use in mbed OS. |
kevman | 0:38ceb79fef03 | 11 | # |
kevman | 0:38ceb79fef03 | 12 | # Usage: adjust-config.sh [path to config script] [path to config file] |
kevman | 0:38ceb79fef03 | 13 | # |
kevman | 0:38ceb79fef03 | 14 | set -eu |
kevman | 0:38ceb79fef03 | 15 | |
kevman | 0:38ceb79fef03 | 16 | if [ $# -ne 2 ]; then |
kevman | 0:38ceb79fef03 | 17 | echo "Usage: $0 path/to/config.pl path/to/config.h" >&2 |
kevman | 0:38ceb79fef03 | 18 | exit 1 |
kevman | 0:38ceb79fef03 | 19 | fi |
kevman | 0:38ceb79fef03 | 20 | |
kevman | 0:38ceb79fef03 | 21 | SCRIPT=$1 |
kevman | 0:38ceb79fef03 | 22 | FILE=$2 |
kevman | 0:38ceb79fef03 | 23 | |
kevman | 0:38ceb79fef03 | 24 | conf() { |
kevman | 0:38ceb79fef03 | 25 | $SCRIPT -f $FILE $@ |
kevman | 0:38ceb79fef03 | 26 | } |
kevman | 0:38ceb79fef03 | 27 | |
kevman | 0:38ceb79fef03 | 28 | add_code() { |
kevman | 0:38ceb79fef03 | 29 | MATCH_PATTERN="$1" |
kevman | 0:38ceb79fef03 | 30 | shift |
kevman | 0:38ceb79fef03 | 31 | CODE=$(IFS=""; printf "%s" "$*") |
kevman | 0:38ceb79fef03 | 32 | |
kevman | 0:38ceb79fef03 | 33 | perl -i -pe \ |
kevman | 0:38ceb79fef03 | 34 | "s/$MATCH_PATTERN/$MATCH_PATTERN$CODE/igs" \ |
kevman | 0:38ceb79fef03 | 35 | "$FILE" |
kevman | 0:38ceb79fef03 | 36 | } |
kevman | 0:38ceb79fef03 | 37 | |
kevman | 0:38ceb79fef03 | 38 | # add an #ifndef to include config-no-entropy.h when the target does not have |
kevman | 0:38ceb79fef03 | 39 | # an entropy source we can use. |
kevman | 0:38ceb79fef03 | 40 | add_code \ |
kevman | 0:38ceb79fef03 | 41 | "#ifndef MBEDTLS_CONFIG_H\n" \ |
kevman | 0:38ceb79fef03 | 42 | "\n" \ |
kevman | 0:38ceb79fef03 | 43 | "#include \"platform\/inc\/platform_mbed.h\"\n" \ |
kevman | 0:38ceb79fef03 | 44 | "\n" \ |
kevman | 0:38ceb79fef03 | 45 | "\/*\n" \ |
kevman | 0:38ceb79fef03 | 46 | " * Only use features that do not require an entropy source when\n" \ |
kevman | 0:38ceb79fef03 | 47 | " * DEVICE_ENTROPY_SOURCE is not defined in mbed OS.\n" \ |
kevman | 0:38ceb79fef03 | 48 | " *\/\n" \ |
kevman | 0:38ceb79fef03 | 49 | "#if !defined(MBEDTLS_ENTROPY_HARDWARE_ALT) && !defined(MBEDTLS_TEST_NULL_ENTROPY) && \\\\\n" \ |
kevman | 0:38ceb79fef03 | 50 | " !defined(MBEDTLS_ENTROPY_NV_SEED)\n" \ |
kevman | 0:38ceb79fef03 | 51 | "#include \"mbedtls\/config-no-entropy.h\"\n" \ |
kevman | 0:38ceb79fef03 | 52 | "\n" \ |
kevman | 0:38ceb79fef03 | 53 | "#if defined(MBEDTLS_USER_CONFIG_FILE)\n" \ |
kevman | 0:38ceb79fef03 | 54 | "#include MBEDTLS_USER_CONFIG_FILE\n" \ |
kevman | 0:38ceb79fef03 | 55 | "#endif\n" \ |
kevman | 0:38ceb79fef03 | 56 | "\n" \ |
kevman | 0:38ceb79fef03 | 57 | "#else\n" |
kevman | 0:38ceb79fef03 | 58 | |
kevman | 0:38ceb79fef03 | 59 | add_code \ |
kevman | 0:38ceb79fef03 | 60 | "#include \"check_config.h\"\n" \ |
kevman | 0:38ceb79fef03 | 61 | "\n" \ |
kevman | 0:38ceb79fef03 | 62 | "#endif \/* !MBEDTLS_ENTROPY_HARDWARE_ALT && !MBEDTLS_TEST_NULL_ENTROPY && !MBEDTLS_ENTROPY_NV_SEED *\/\n" \ |
kevman | 0:38ceb79fef03 | 63 | "\n" \ |
kevman | 0:38ceb79fef03 | 64 | "#if defined(MBEDTLS_TEST_NULL_ENTROPY)\n" \ |
kevman | 0:38ceb79fef03 | 65 | "#warning \"MBEDTLS_TEST_NULL_ENTROPY has been enabled. This \" \\\\\n" \ |
kevman | 0:38ceb79fef03 | 66 | " \"configuration is not secure and is not suitable for production use\"\n" \ |
kevman | 0:38ceb79fef03 | 67 | "#endif\n" \ |
kevman | 0:38ceb79fef03 | 68 | "\n" \ |
kevman | 0:38ceb79fef03 | 69 | "#if defined(MBEDTLS_SSL_TLS_C) && !defined(MBEDTLS_TEST_NULL_ENTROPY) && \\\\\n" \ |
kevman | 0:38ceb79fef03 | 70 | " !defined(MBEDTLS_ENTROPY_HARDWARE_ALT) && !defined(MBEDTLS_ENTROPY_NV_SEED)\n" \ |
kevman | 0:38ceb79fef03 | 71 | "#error \"No entropy source was found at build time, so TLS \" \\\\\n" \ |
kevman | 0:38ceb79fef03 | 72 | " \"functionality is not available\"\n" \ |
kevman | 0:38ceb79fef03 | 73 | "#endif\n" |
kevman | 0:38ceb79fef03 | 74 | |
kevman | 0:38ceb79fef03 | 75 | # not supported on mbed OS, nor used by mbed Client |
kevman | 0:38ceb79fef03 | 76 | conf unset MBEDTLS_NET_C |
kevman | 0:38ceb79fef03 | 77 | conf unset MBEDTLS_TIMING_C |
kevman | 0:38ceb79fef03 | 78 | |
kevman | 0:38ceb79fef03 | 79 | # not supported on all targets with mbed OS, nor used by mbed Client |
kevman | 0:38ceb79fef03 | 80 | conf unset MBEDTLS_HAVE_TIME_DATE |
kevman | 0:38ceb79fef03 | 81 | conf unset MBEDTLS_FS_IO |
kevman | 0:38ceb79fef03 | 82 | conf set MBEDTLS_NO_PLATFORM_ENTROPY |
kevman | 0:38ceb79fef03 | 83 | |
kevman | 0:38ceb79fef03 | 84 | conf unset MBEDTLS_CIPHER_MODE_CFB |
kevman | 0:38ceb79fef03 | 85 | conf unset MBEDTLS_CIPHER_MODE_OFB |
kevman | 0:38ceb79fef03 | 86 | conf unset MBEDTLS_CIPHER_MODE_CTR |
kevman | 0:38ceb79fef03 | 87 | conf unset MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS |
kevman | 0:38ceb79fef03 | 88 | conf unset MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN |
kevman | 0:38ceb79fef03 | 89 | conf unset MBEDTLS_CIPHER_PADDING_ZEROS |
kevman | 0:38ceb79fef03 | 90 | conf unset MBEDTLS_CIPHER_MODE_XTS |
kevman | 0:38ceb79fef03 | 91 | conf unset MBEDTLS_ECP_DP_SECP192R1_ENABLED |
kevman | 0:38ceb79fef03 | 92 | conf unset MBEDTLS_ECP_DP_SECP224R1_ENABLED |
kevman | 0:38ceb79fef03 | 93 | conf unset MBEDTLS_ECP_DP_SECP521R1_ENABLED |
kevman | 0:38ceb79fef03 | 94 | conf unset MBEDTLS_ECP_DP_SECP192K1_ENABLED |
kevman | 0:38ceb79fef03 | 95 | conf unset MBEDTLS_ECP_DP_SECP224K1_ENABLED |
kevman | 0:38ceb79fef03 | 96 | conf unset MBEDTLS_ECP_DP_SECP256K1_ENABLED |
kevman | 0:38ceb79fef03 | 97 | conf unset MBEDTLS_ECP_DP_BP256R1_ENABLED |
kevman | 0:38ceb79fef03 | 98 | conf unset MBEDTLS_ECP_DP_BP384R1_ENABLED |
kevman | 0:38ceb79fef03 | 99 | conf unset MBEDTLS_ECP_DP_BP512R1_ENABLED |
kevman | 0:38ceb79fef03 | 100 | conf unset MBEDTLS_PK_PARSE_EC_EXTENDED |
kevman | 0:38ceb79fef03 | 101 | |
kevman | 0:38ceb79fef03 | 102 | conf unset MBEDTLS_AESNI_C |
kevman | 0:38ceb79fef03 | 103 | conf unset MBEDTLS_ARC4_C |
kevman | 0:38ceb79fef03 | 104 | conf unset MBEDTLS_BLOWFISH_C |
kevman | 0:38ceb79fef03 | 105 | conf unset MBEDTLS_CAMELLIA_C |
kevman | 0:38ceb79fef03 | 106 | conf unset MBEDTLS_DES_C |
kevman | 0:38ceb79fef03 | 107 | conf unset MBEDTLS_DHM_C |
kevman | 0:38ceb79fef03 | 108 | conf unset MBEDTLS_GENPRIME |
kevman | 0:38ceb79fef03 | 109 | conf unset MBEDTLS_MD5_C |
kevman | 0:38ceb79fef03 | 110 | conf unset MBEDTLS_PADLOCK_C |
kevman | 0:38ceb79fef03 | 111 | conf unset MBEDTLS_PEM_WRITE_C |
kevman | 0:38ceb79fef03 | 112 | conf unset MBEDTLS_PKCS5_C |
kevman | 0:38ceb79fef03 | 113 | conf unset MBEDTLS_PKCS12_C |
kevman | 0:38ceb79fef03 | 114 | conf unset MBEDTLS_RIPEMD160_C |
kevman | 0:38ceb79fef03 | 115 | conf unset MBEDTLS_SHA1_C |
kevman | 0:38ceb79fef03 | 116 | conf unset MBEDTLS_XTEA_C |
kevman | 0:38ceb79fef03 | 117 | |
kevman | 0:38ceb79fef03 | 118 | conf set MBEDTLS_CMAC_C |
kevman | 0:38ceb79fef03 | 119 | |
kevman | 0:38ceb79fef03 | 120 | conf set MBEDTLS_AES_ROM_TABLES |
kevman | 0:38ceb79fef03 | 121 | |
kevman | 0:38ceb79fef03 | 122 | conf unset MBEDTLS_X509_RSASSA_PSS_SUPPORT |
kevman | 0:38ceb79fef03 | 123 | |
kevman | 0:38ceb79fef03 | 124 | conf unset MBEDTLS_X509_CSR_PARSE_C |
kevman | 0:38ceb79fef03 | 125 | conf unset MBEDTLS_X509_CREATE_C |
kevman | 0:38ceb79fef03 | 126 | conf unset MBEDTLS_X509_CRT_WRITE_C |
kevman | 0:38ceb79fef03 | 127 | conf unset MBEDTLS_X509_CSR_WRITE_C |
kevman | 0:38ceb79fef03 | 128 | |
kevman | 0:38ceb79fef03 | 129 | conf unset MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED |
kevman | 0:38ceb79fef03 | 130 | conf unset MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED |
kevman | 0:38ceb79fef03 | 131 | conf unset MBEDTLS_KEY_EXCHANGE_RSA_ENABLED |
kevman | 0:38ceb79fef03 | 132 | conf unset MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED |
kevman | 0:38ceb79fef03 | 133 | conf unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED |
kevman | 0:38ceb79fef03 | 134 | conf unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED |
kevman | 0:38ceb79fef03 | 135 | conf unset MBEDTLS_SSL_FALLBACK_SCSV |
kevman | 0:38ceb79fef03 | 136 | conf unset MBEDTLS_SSL_CBC_RECORD_SPLITTING |
kevman | 0:38ceb79fef03 | 137 | conf unset MBEDTLS_SSL_PROTO_TLS1 |
kevman | 0:38ceb79fef03 | 138 | conf unset MBEDTLS_SSL_PROTO_TLS1_1 |
kevman | 0:38ceb79fef03 | 139 | conf unset MBEDTLS_SSL_TRUNCATED_HMAC |
kevman | 0:38ceb79fef03 | 140 | |
kevman | 0:38ceb79fef03 | 141 | conf unset MBEDTLS_PLATFORM_TIME_TYPE_MACRO |
kevman | 0:38ceb79fef03 | 142 |