| User | Revision | Line number | New contents of line |
|---|
| leothedragon |
0:25fa8795676b
|
1
|
// ----------------------------------------------------------------------------
|
| leothedragon |
0:25fa8795676b
|
2
|
// Copyright 2016-2019 ARM Ltd.
|
| leothedragon |
0:25fa8795676b
|
3
|
//
|
| leothedragon |
0:25fa8795676b
|
4
|
// SPDX-License-Identifier: Apache-2.0
|
| leothedragon |
0:25fa8795676b
|
5
|
//
|
| leothedragon |
0:25fa8795676b
|
6
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
| leothedragon |
0:25fa8795676b
|
7
|
// you may not use this file except in compliance with the License.
|
| leothedragon |
0:25fa8795676b
|
8
|
// You may obtain a copy of the License at
|
| leothedragon |
0:25fa8795676b
|
9
|
//
|
| leothedragon |
0:25fa8795676b
|
10
|
// http://www.apache.org/licenses/LICENSE-2.0
|
| leothedragon |
0:25fa8795676b
|
11
|
//
|
| leothedragon |
0:25fa8795676b
|
12
|
// Unless required by applicable law or agreed to in writing, software
|
| leothedragon |
0:25fa8795676b
|
13
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
| leothedragon |
0:25fa8795676b
|
14
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
| leothedragon |
0:25fa8795676b
|
15
|
// See the License for the specific language governing permissions and
|
| leothedragon |
0:25fa8795676b
|
16
|
// limitations under the License.
|
| leothedragon |
0:25fa8795676b
|
17
|
// ----------------------------------------------------------------------------
|
| leothedragon |
0:25fa8795676b
|
18
|
|
| leothedragon |
0:25fa8795676b
|
19
|
#ifndef PAL_MBEDTLS_USER_CONFIG_H
|
| leothedragon |
0:25fa8795676b
|
20
|
#define PAL_MBEDTLS_USER_CONFIG_H
|
| leothedragon |
0:25fa8795676b
|
21
|
|
| leothedragon |
0:25fa8795676b
|
22
|
|
| leothedragon |
0:25fa8795676b
|
23
|
/*! All of the following definitions are mandatory requirements for correct
|
| leothedragon |
0:25fa8795676b
|
24
|
* functionality of PAL TLS and Crypto components.
|
| leothedragon |
0:25fa8795676b
|
25
|
* Please do not disable them.
|
| leothedragon |
0:25fa8795676b
|
26
|
*/
|
| leothedragon |
0:25fa8795676b
|
27
|
|
| leothedragon |
0:25fa8795676b
|
28
|
/* Platform has time function to provide time for certificates verifications */
|
| leothedragon |
0:25fa8795676b
|
29
|
#if 1 //Please set to 1 if you are using secure time
|
| leothedragon |
0:25fa8795676b
|
30
|
#ifndef MBEDTLS_HAVE_TIME
|
| leothedragon |
0:25fa8795676b
|
31
|
#define MBEDTLS_HAVE_TIME
|
| leothedragon |
0:25fa8795676b
|
32
|
#endif //MBEDTLS_HAVE_TIME
|
| leothedragon |
0:25fa8795676b
|
33
|
|
| leothedragon |
0:25fa8795676b
|
34
|
#ifndef MBEDTLS_HAVE_TIME_DATE
|
| leothedragon |
0:25fa8795676b
|
35
|
#define MBEDTLS_HAVE_TIME_DATE
|
| leothedragon |
0:25fa8795676b
|
36
|
#endif //MBEDTLS_HAVE_TIME_DATE
|
| leothedragon |
0:25fa8795676b
|
37
|
|
| leothedragon |
0:25fa8795676b
|
38
|
#ifndef MBEDTLS_PLATFORM_TIME_ALT
|
| leothedragon |
0:25fa8795676b
|
39
|
#define MBEDTLS_PLATFORM_TIME_ALT
|
| leothedragon |
0:25fa8795676b
|
40
|
#endif //MBEDTLS_PLATFORM_TIME_ALT
|
| leothedragon |
0:25fa8795676b
|
41
|
|
| leothedragon |
0:25fa8795676b
|
42
|
/* System support */
|
| leothedragon |
0:25fa8795676b
|
43
|
#ifndef MBEDTLS_HAVE_ASM
|
| leothedragon |
0:25fa8795676b
|
44
|
#define MBEDTLS_HAVE_ASM
|
| leothedragon |
0:25fa8795676b
|
45
|
#endif //MBEDTLS_HAVE_ASM
|
| leothedragon |
0:25fa8795676b
|
46
|
#endif
|
| leothedragon |
0:25fa8795676b
|
47
|
/* mbed TLS feature support */
|
| leothedragon |
0:25fa8795676b
|
48
|
#ifndef MBEDTLS_ECP_DP_SECP256R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
49
|
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
50
|
#endif //MBEDTLS_ECP_DP_SECP256R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
51
|
|
| leothedragon |
0:25fa8795676b
|
52
|
#ifndef MBEDTLS_ECP_NIST_OPTIM
|
| leothedragon |
0:25fa8795676b
|
53
|
#define MBEDTLS_ECP_NIST_OPTIM
|
| leothedragon |
0:25fa8795676b
|
54
|
#endif //MBEDTLS_ECP_NIST_OPTIM
|
| leothedragon |
0:25fa8795676b
|
55
|
|
| leothedragon |
0:25fa8795676b
|
56
|
#ifndef MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
|
| leothedragon |
0:25fa8795676b
|
57
|
#define MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
|
| leothedragon |
0:25fa8795676b
|
58
|
#endif //MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
|
| leothedragon |
0:25fa8795676b
|
59
|
|
| leothedragon |
0:25fa8795676b
|
60
|
#ifndef MBEDTLS_SSL_PROTO_TLS1_2
|
| leothedragon |
0:25fa8795676b
|
61
|
#define MBEDTLS_SSL_PROTO_TLS1_2
|
| leothedragon |
0:25fa8795676b
|
62
|
#endif //MBEDTLS_SSL_PROTO_TLS1_2
|
| leothedragon |
0:25fa8795676b
|
63
|
|
| leothedragon |
0:25fa8795676b
|
64
|
#ifndef MBEDTLS_SSL_PROTO_DTLS
|
| leothedragon |
0:25fa8795676b
|
65
|
#define MBEDTLS_SSL_PROTO_DTLS
|
| leothedragon |
0:25fa8795676b
|
66
|
#endif //MBEDTLS_SSL_PROTO_DTLS
|
| leothedragon |
0:25fa8795676b
|
67
|
|
| leothedragon |
0:25fa8795676b
|
68
|
#ifndef MBEDTLS_SSL_DTLS_ANTI_REPLAY
|
| leothedragon |
0:25fa8795676b
|
69
|
#define MBEDTLS_SSL_DTLS_ANTI_REPLAY
|
| leothedragon |
0:25fa8795676b
|
70
|
#endif //MBEDTLS_SSL_DTLS_ANTI_REPLAY
|
| leothedragon |
0:25fa8795676b
|
71
|
|
| leothedragon |
0:25fa8795676b
|
72
|
#ifndef MBEDTLS_SSL_DTLS_HELLO_VERIFY
|
| leothedragon |
0:25fa8795676b
|
73
|
#define MBEDTLS_SSL_DTLS_HELLO_VERIFY
|
| leothedragon |
0:25fa8795676b
|
74
|
#endif //MBEDTLS_SSL_DTLS_HELLO_VERIFY
|
| leothedragon |
0:25fa8795676b
|
75
|
|
| leothedragon |
0:25fa8795676b
|
76
|
#ifndef MBEDTLS_SSL_EXPORT_KEYS
|
| leothedragon |
0:25fa8795676b
|
77
|
#define MBEDTLS_SSL_EXPORT_KEYS
|
| leothedragon |
0:25fa8795676b
|
78
|
#endif //MBEDTLS_SSL_EXPORT_KEYS
|
| leothedragon |
0:25fa8795676b
|
79
|
|
| leothedragon |
0:25fa8795676b
|
80
|
/* mbed TLS modules */
|
| leothedragon |
0:25fa8795676b
|
81
|
#ifndef MBEDTLS_AES_C
|
| leothedragon |
0:25fa8795676b
|
82
|
#define MBEDTLS_AES_C
|
| leothedragon |
0:25fa8795676b
|
83
|
#endif //MBEDTLS_AES_C
|
| leothedragon |
0:25fa8795676b
|
84
|
|
| leothedragon |
0:25fa8795676b
|
85
|
/* Disable some of the speed optimizations on AES code to save
|
| leothedragon |
0:25fa8795676b
|
86
|
* ~6200 bytes of ROM. According to comments on the mbedtls PR 394,
|
| leothedragon |
0:25fa8795676b
|
87
|
* the speed on Cortex M4 is not even reduced by this. */
|
| leothedragon |
0:25fa8795676b
|
88
|
#ifndef MBEDTLS_AES_FEWER_TABLES
|
| leothedragon |
0:25fa8795676b
|
89
|
#define MBEDTLS_AES_FEWER_TABLES
|
| leothedragon |
0:25fa8795676b
|
90
|
#endif // MBEDTLS_AES_FEWER_TABLES
|
| leothedragon |
0:25fa8795676b
|
91
|
|
| leothedragon |
0:25fa8795676b
|
92
|
#ifndef MBEDTLS_ASN1_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
93
|
#define MBEDTLS_ASN1_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
94
|
#endif //MBEDTLS_ASN1_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
95
|
|
| leothedragon |
0:25fa8795676b
|
96
|
#ifndef MBEDTLS_ASN1_WRITE_C
|
| leothedragon |
0:25fa8795676b
|
97
|
#define MBEDTLS_ASN1_WRITE_C
|
| leothedragon |
0:25fa8795676b
|
98
|
#endif //MBEDTLS_ASN1_WRITE_C
|
| leothedragon |
0:25fa8795676b
|
99
|
|
| leothedragon |
0:25fa8795676b
|
100
|
#ifndef MBEDTLS_BIGNUM_C
|
| leothedragon |
0:25fa8795676b
|
101
|
#define MBEDTLS_BIGNUM_C
|
| leothedragon |
0:25fa8795676b
|
102
|
#endif //MBEDTLS_BIGNUM_C
|
| leothedragon |
0:25fa8795676b
|
103
|
|
| leothedragon |
0:25fa8795676b
|
104
|
#ifndef MBEDTLS_CIPHER_C
|
| leothedragon |
0:25fa8795676b
|
105
|
#define MBEDTLS_CIPHER_C
|
| leothedragon |
0:25fa8795676b
|
106
|
#endif //MBEDTLS_CIPHER_C
|
| leothedragon |
0:25fa8795676b
|
107
|
|
| leothedragon |
0:25fa8795676b
|
108
|
#ifndef MBEDTLS_CTR_DRBG_C
|
| leothedragon |
0:25fa8795676b
|
109
|
#define MBEDTLS_CTR_DRBG_C
|
| leothedragon |
0:25fa8795676b
|
110
|
#endif //MBEDTLS_CTR_DRBG_C
|
| leothedragon |
0:25fa8795676b
|
111
|
|
| leothedragon |
0:25fa8795676b
|
112
|
#ifndef MBEDTLS_ECP_C
|
| leothedragon |
0:25fa8795676b
|
113
|
#define MBEDTLS_ECP_C
|
| leothedragon |
0:25fa8795676b
|
114
|
#endif //MBEDTLS_ECP_C
|
| leothedragon |
0:25fa8795676b
|
115
|
|
| leothedragon |
0:25fa8795676b
|
116
|
#ifndef MBEDTLS_ENTROPY_C
|
| leothedragon |
0:25fa8795676b
|
117
|
#define MBEDTLS_ENTROPY_C
|
| leothedragon |
0:25fa8795676b
|
118
|
#endif //MBEDTLS_ENTROPY_C
|
| leothedragon |
0:25fa8795676b
|
119
|
|
| leothedragon |
0:25fa8795676b
|
120
|
#ifndef MBEDTLS_MD_C
|
| leothedragon |
0:25fa8795676b
|
121
|
#define MBEDTLS_MD_C
|
| leothedragon |
0:25fa8795676b
|
122
|
#endif //MBEDTLS_MD_C
|
| leothedragon |
0:25fa8795676b
|
123
|
|
| leothedragon |
0:25fa8795676b
|
124
|
#ifndef MBEDTLS_OID_C
|
| leothedragon |
0:25fa8795676b
|
125
|
#define MBEDTLS_OID_C
|
| leothedragon |
0:25fa8795676b
|
126
|
#endif //MBEDTLS_OID_C
|
| leothedragon |
0:25fa8795676b
|
127
|
|
| leothedragon |
0:25fa8795676b
|
128
|
#ifndef MBEDTLS_PK_C
|
| leothedragon |
0:25fa8795676b
|
129
|
#define MBEDTLS_PK_C
|
| leothedragon |
0:25fa8795676b
|
130
|
#endif //MBEDTLS_PK_C
|
| leothedragon |
0:25fa8795676b
|
131
|
|
| leothedragon |
0:25fa8795676b
|
132
|
#ifndef MBEDTLS_PK_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
133
|
#define MBEDTLS_PK_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
134
|
#endif //MBEDTLS_PK_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
135
|
|
| leothedragon |
0:25fa8795676b
|
136
|
#ifndef MBEDTLS_SHA256_C
|
| leothedragon |
0:25fa8795676b
|
137
|
#define MBEDTLS_SHA256_C
|
| leothedragon |
0:25fa8795676b
|
138
|
#endif //MBEDTLS_SHA256_C
|
| leothedragon |
0:25fa8795676b
|
139
|
|
| leothedragon |
0:25fa8795676b
|
140
|
// Disable the speed optimizations of SHA256, makes binary size smaller
|
| leothedragon |
0:25fa8795676b
|
141
|
// on Cortex-M by 1800B with ARMCC5 and 1384B with GCC 6.3.
|
| leothedragon |
0:25fa8795676b
|
142
|
#ifndef MBEDTLS_SHA256_SMALLER
|
| leothedragon |
0:25fa8795676b
|
143
|
#define MBEDTLS_SHA256_SMALLER
|
| leothedragon |
0:25fa8795676b
|
144
|
#endif // MBEDTLS_SHA256_SMALLER
|
| leothedragon |
0:25fa8795676b
|
145
|
|
| leothedragon |
0:25fa8795676b
|
146
|
#ifndef MBEDTLS_SSL_COOKIE_C
|
| leothedragon |
0:25fa8795676b
|
147
|
#define MBEDTLS_SSL_COOKIE_C
|
| leothedragon |
0:25fa8795676b
|
148
|
#endif //MBEDTLS_SSL_COOKIE_C
|
| leothedragon |
0:25fa8795676b
|
149
|
|
| leothedragon |
0:25fa8795676b
|
150
|
#ifndef MBEDTLS_SSL_CLI_C
|
| leothedragon |
0:25fa8795676b
|
151
|
#define MBEDTLS_SSL_CLI_C
|
| leothedragon |
0:25fa8795676b
|
152
|
#endif //MBEDTLS_SSL_CLI_C
|
| leothedragon |
0:25fa8795676b
|
153
|
|
| leothedragon |
0:25fa8795676b
|
154
|
#ifndef MBEDTLS_SSL_TLS_C
|
| leothedragon |
0:25fa8795676b
|
155
|
#define MBEDTLS_SSL_TLS_C
|
| leothedragon |
0:25fa8795676b
|
156
|
#endif //MBEDTLS_SSL_TLS_C
|
| leothedragon |
0:25fa8795676b
|
157
|
// XXX mbedclient needs these: mbedtls_x509_crt_free, mbedtls_x509_crt_init, mbedtls_x509_crt_parse
|
| leothedragon |
0:25fa8795676b
|
158
|
#ifndef MBEDTLS_X509_USE_C
|
| leothedragon |
0:25fa8795676b
|
159
|
#define MBEDTLS_X509_USE_C
|
| leothedragon |
0:25fa8795676b
|
160
|
#endif //MBEDTLS_X509_USE_C
|
| leothedragon |
0:25fa8795676b
|
161
|
|
| leothedragon |
0:25fa8795676b
|
162
|
#ifndef MBEDTLS_X509_CRT_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
163
|
#define MBEDTLS_X509_CRT_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
164
|
#endif //MBEDTLS_X509_CRT_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
165
|
// a bit wrong way to get mbedtls_ssl_conf_psk:
|
| leothedragon |
0:25fa8795676b
|
166
|
#ifndef MBEDTLS_CMAC_C
|
| leothedragon |
0:25fa8795676b
|
167
|
#define MBEDTLS_CMAC_C
|
| leothedragon |
0:25fa8795676b
|
168
|
#endif //MBEDTLS_CMAC_C
|
| leothedragon |
0:25fa8795676b
|
169
|
|
| leothedragon |
0:25fa8795676b
|
170
|
#ifndef MBEDTLS_ECDH_C
|
| leothedragon |
0:25fa8795676b
|
171
|
#define MBEDTLS_ECDH_C
|
| leothedragon |
0:25fa8795676b
|
172
|
#endif //MBEDTLS_ECDH_C
|
| leothedragon |
0:25fa8795676b
|
173
|
|
| leothedragon |
0:25fa8795676b
|
174
|
#ifndef MBEDTLS_ECDSA_C
|
| leothedragon |
0:25fa8795676b
|
175
|
#define MBEDTLS_ECDSA_C
|
| leothedragon |
0:25fa8795676b
|
176
|
#endif //MBEDTLS_ECDSA_C
|
| leothedragon |
0:25fa8795676b
|
177
|
|
| leothedragon |
0:25fa8795676b
|
178
|
#ifndef MBEDTLS_GCM_C
|
| leothedragon |
0:25fa8795676b
|
179
|
#define MBEDTLS_GCM_C
|
| leothedragon |
0:25fa8795676b
|
180
|
#endif //MBEDTLS_GCM_C
|
| leothedragon |
0:25fa8795676b
|
181
|
|
| leothedragon |
0:25fa8795676b
|
182
|
#ifndef MBEDTLS_X509_CRT_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
183
|
#define MBEDTLS_X509_CRT_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
184
|
#endif //MBEDTLS_X509_CRT_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
185
|
|
| leothedragon |
0:25fa8795676b
|
186
|
#ifndef MBEDTLS_X509_CSR_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
187
|
#define MBEDTLS_X509_CSR_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
188
|
#endif //MBEDTLS_X509_CSR_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
189
|
|
| leothedragon |
0:25fa8795676b
|
190
|
#ifndef MBEDTLS_X509_CREATE_C
|
| leothedragon |
0:25fa8795676b
|
191
|
#define MBEDTLS_X509_CREATE_C
|
| leothedragon |
0:25fa8795676b
|
192
|
#endif //MBEDTLS_X509_CREATE_C
|
| leothedragon |
0:25fa8795676b
|
193
|
|
| leothedragon |
0:25fa8795676b
|
194
|
#ifndef MBEDTLS_X509_CSR_WRITE_C
|
| leothedragon |
0:25fa8795676b
|
195
|
#define MBEDTLS_X509_CSR_WRITE_C
|
| leothedragon |
0:25fa8795676b
|
196
|
#endif //MBEDTLS_X509_CSR_WRITE_C
|
| leothedragon |
0:25fa8795676b
|
197
|
|
| leothedragon |
0:25fa8795676b
|
198
|
#ifndef MBEDTLS_CTR_DRBG_MAX_REQUEST
|
| leothedragon |
0:25fa8795676b
|
199
|
#define MBEDTLS_CTR_DRBG_MAX_REQUEST 2048
|
| leothedragon |
0:25fa8795676b
|
200
|
#endif //MBEDTLS_CTR_DRBG_MAX_REQUEST
|
| leothedragon |
0:25fa8795676b
|
201
|
|
| leothedragon |
0:25fa8795676b
|
202
|
// Needed by update
|
| leothedragon |
0:25fa8795676b
|
203
|
#ifndef MBEDTLS_CIPHER_MODE_CTR
|
| leothedragon |
0:25fa8795676b
|
204
|
#define MBEDTLS_CIPHER_MODE_CTR
|
| leothedragon |
0:25fa8795676b
|
205
|
#endif //MBEDTLS_CIPHER_MODE_CTR
|
| leothedragon |
0:25fa8795676b
|
206
|
|
| leothedragon |
0:25fa8795676b
|
207
|
// Save ROM and a few bytes of RAM by specifying our own ciphersuite list
|
| leothedragon |
0:25fa8795676b
|
208
|
#ifndef MBEDTLS_SSL_CIPHERSUITES
|
| leothedragon |
0:25fa8795676b
|
209
|
#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8, \
|
| leothedragon |
0:25fa8795676b
|
210
|
MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, \
|
| leothedragon |
0:25fa8795676b
|
211
|
MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, \
|
| leothedragon |
0:25fa8795676b
|
212
|
MBEDTLS_TLS_PSK_WITH_AES_128_CCM_8, \
|
| leothedragon |
0:25fa8795676b
|
213
|
MBEDTLS_TLS_PSK_WITH_AES_256_CCM_8
|
| leothedragon |
0:25fa8795676b
|
214
|
#endif //MBEDTLS_SSL_CIPHERSUITES
|
| leothedragon |
0:25fa8795676b
|
215
|
|
| leothedragon |
0:25fa8795676b
|
216
|
/*! All of the following definitions are optimizations (reduce mbedTLS memory usage and size),
|
| leothedragon |
0:25fa8795676b
|
217
|
* changing them is on the user responsibility since they can enlarge
|
| leothedragon |
0:25fa8795676b
|
218
|
* the binary footprint and the memory usage
|
| leothedragon |
0:25fa8795676b
|
219
|
*/
|
| leothedragon |
0:25fa8795676b
|
220
|
|
| leothedragon |
0:25fa8795676b
|
221
|
// define to save 8KB RAM at the expense of ROM
|
| leothedragon |
0:25fa8795676b
|
222
|
#ifndef MBEDTLS_AES_ROM_TABLES
|
| leothedragon |
0:25fa8795676b
|
223
|
#define MBEDTLS_AES_ROM_TABLES
|
| leothedragon |
0:25fa8795676b
|
224
|
#endif //MBEDTLS_AES_ROM_TABLES
|
| leothedragon |
0:25fa8795676b
|
225
|
|
| leothedragon |
0:25fa8795676b
|
226
|
// Reduce IO buffer to save RAM, default is 16KB
|
| leothedragon |
0:25fa8795676b
|
227
|
#ifndef MBEDTLS_SSL_MAX_CONTENT_LEN
|
| leothedragon |
0:25fa8795676b
|
228
|
#define MBEDTLS_SSL_MAX_CONTENT_LEN 4096
|
| leothedragon |
0:25fa8795676b
|
229
|
#endif //MBEDTLS_SSL_MAX_CONTENT_LEN
|
| leothedragon |
0:25fa8795676b
|
230
|
|
| leothedragon |
0:25fa8795676b
|
231
|
// needed for Base64 encoding Opaque data for
|
| leothedragon |
0:25fa8795676b
|
232
|
// registration payload, adds 500 bytes to flash.
|
| leothedragon |
0:25fa8795676b
|
233
|
#ifndef MBEDTLS_BASE64_C
|
| leothedragon |
0:25fa8795676b
|
234
|
#define MBEDTLS_BASE64_C
|
| leothedragon |
0:25fa8795676b
|
235
|
#endif // MBEDTLS_BASE64_C
|
| leothedragon |
0:25fa8795676b
|
236
|
|
| leothedragon |
0:25fa8795676b
|
237
|
/**
|
| leothedragon |
0:25fa8795676b
|
238
|
* \def MBEDTLS_SSL_RENEGOTIATION
|
| leothedragon |
0:25fa8795676b
|
239
|
*
|
| leothedragon |
0:25fa8795676b
|
240
|
* Enable support for TLS renegotiation.
|
| leothedragon |
0:25fa8795676b
|
241
|
*
|
| leothedragon |
0:25fa8795676b
|
242
|
* The two main uses of renegotiation are (1) refresh keys on long-lived
|
| leothedragon |
0:25fa8795676b
|
243
|
* connections and (2) client authentication after the initial handshake.
|
| leothedragon |
0:25fa8795676b
|
244
|
* If you don't need renegotiation, it's probably better to disable it, since
|
| leothedragon |
0:25fa8795676b
|
245
|
* it has been associated with security issues in the past and is easy to
|
| leothedragon |
0:25fa8795676b
|
246
|
* misuse/misunderstand.
|
| leothedragon |
0:25fa8795676b
|
247
|
*
|
| leothedragon |
0:25fa8795676b
|
248
|
* Comment this to disable support for renegotiation.
|
| leothedragon |
0:25fa8795676b
|
249
|
*
|
| leothedragon |
0:25fa8795676b
|
250
|
* \note Even if this option is disabled, both client and server are aware
|
| leothedragon |
0:25fa8795676b
|
251
|
* of the Renegotiation Indication Extension (RFC 5746) used to
|
| leothedragon |
0:25fa8795676b
|
252
|
* prevent the SSL renegotiation attack (see RFC 5746 Sect. 1).
|
| leothedragon |
0:25fa8795676b
|
253
|
* (See \c mbedtls_ssl_conf_legacy_renegotiation for the
|
| leothedragon |
0:25fa8795676b
|
254
|
* configuration of this extension).
|
| leothedragon |
0:25fa8795676b
|
255
|
*
|
| leothedragon |
0:25fa8795676b
|
256
|
* \note This feature is required by Device Management Client for Client-side
|
| leothedragon |
0:25fa8795676b
|
257
|
* certificate expiration verification. Disabling it will also require
|
| leothedragon |
0:25fa8795676b
|
258
|
* setting PAL_USE_SECURE_TIME to 0.
|
| leothedragon |
0:25fa8795676b
|
259
|
*
|
| leothedragon |
0:25fa8795676b
|
260
|
*/
|
| leothedragon |
0:25fa8795676b
|
261
|
#define MBEDTLS_SSL_RENEGOTIATION
|
| leothedragon |
0:25fa8795676b
|
262
|
|
| leothedragon |
0:25fa8795676b
|
263
|
// Needed by provisioning
|
| leothedragon |
0:25fa8795676b
|
264
|
#undef MBEDTLS_PEM_WRITE_C
|
| leothedragon |
0:25fa8795676b
|
265
|
|
| leothedragon |
0:25fa8795676b
|
266
|
// Remove RSA, save 20KB at total
|
| leothedragon |
0:25fa8795676b
|
267
|
#if !MBED_CONF_MBED_CLIENT_PAL_RSA_REQUIRED
|
| leothedragon |
0:25fa8795676b
|
268
|
#undef MBEDTLS_RSA_C
|
| leothedragon |
0:25fa8795676b
|
269
|
#undef MBEDTLS_PK_RSA_ALT_SUPPORT
|
| leothedragon |
0:25fa8795676b
|
270
|
#undef MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
|
| leothedragon |
0:25fa8795676b
|
271
|
#undef MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
|
| leothedragon |
0:25fa8795676b
|
272
|
#undef MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
|
| leothedragon |
0:25fa8795676b
|
273
|
#endif // MBED_CONF_MBED_CLIENT_PAL_RSA_REQUIRED
|
| leothedragon |
0:25fa8795676b
|
274
|
|
| leothedragon |
0:25fa8795676b
|
275
|
// Remove error messages, save 10KB of ROM
|
| leothedragon |
0:25fa8795676b
|
276
|
#undef MBEDTLS_ERROR_C
|
| leothedragon |
0:25fa8795676b
|
277
|
|
| leothedragon |
0:25fa8795676b
|
278
|
// Remove selftesting and save 11KB of ROM
|
| leothedragon |
0:25fa8795676b
|
279
|
#undef MBEDTLS_SELF_TEST
|
| leothedragon |
0:25fa8795676b
|
280
|
|
| leothedragon |
0:25fa8795676b
|
281
|
#undef MBEDTLS_CERTS_C
|
| leothedragon |
0:25fa8795676b
|
282
|
|
| leothedragon |
0:25fa8795676b
|
283
|
// Reduces ROM size by 30 kB
|
| leothedragon |
0:25fa8795676b
|
284
|
#undef MBEDTLS_ERROR_STRERROR_DUMMY
|
| leothedragon |
0:25fa8795676b
|
285
|
|
| leothedragon |
0:25fa8795676b
|
286
|
#undef MBEDTLS_VERSION_FEATURES
|
| leothedragon |
0:25fa8795676b
|
287
|
|
| leothedragon |
0:25fa8795676b
|
288
|
#undef MBEDTLS_DEBUG_C
|
| leothedragon |
0:25fa8795676b
|
289
|
|
| leothedragon |
0:25fa8795676b
|
290
|
// needed for parsing the certificates
|
| leothedragon |
0:25fa8795676b
|
291
|
#undef MBEDTLS_PEM_PARSE_C
|
| leothedragon |
0:25fa8795676b
|
292
|
|
| leothedragon |
0:25fa8795676b
|
293
|
#undef MBEDTLS_SHA512_C
|
| leothedragon |
0:25fa8795676b
|
294
|
|
| leothedragon |
0:25fa8795676b
|
295
|
#undef MBEDTLS_SSL_SRV_C
|
| leothedragon |
0:25fa8795676b
|
296
|
|
| leothedragon |
0:25fa8795676b
|
297
|
#undef MBEDTLS_ECP_DP_SECP192R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
298
|
#undef MBEDTLS_ECP_DP_SECP224R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
299
|
#undef MBEDTLS_ECP_DP_SECP384R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
300
|
#undef MBEDTLS_ECP_DP_SECP521R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
301
|
#undef MBEDTLS_ECP_DP_SECP192K1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
302
|
#undef MBEDTLS_ECP_DP_SECP224K1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
303
|
#undef MBEDTLS_ECP_DP_SECP256K1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
304
|
#undef MBEDTLS_ECP_DP_BP256R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
305
|
#undef MBEDTLS_ECP_DP_BP384R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
306
|
#undef MBEDTLS_ECP_DP_BP512R1_ENABLED
|
| leothedragon |
0:25fa8795676b
|
307
|
#undef MBEDTLS_ECP_DP_CURVE25519_ENABLED
|
| leothedragon |
0:25fa8795676b
|
308
|
|
| leothedragon |
0:25fa8795676b
|
309
|
// Reduces size particularly in case PSA crypto is used
|
| leothedragon |
0:25fa8795676b
|
310
|
#undef MBEDTLS_CHACHA20_C
|
| leothedragon |
0:25fa8795676b
|
311
|
#undef MBEDTLS_CHACHAPOLY_C
|
| leothedragon |
0:25fa8795676b
|
312
|
#undef MBEDTLS_POLY1305_C
|
| leothedragon |
0:25fa8795676b
|
313
|
|
| leothedragon |
0:25fa8795676b
|
314
|
#include "mbedtls/check_config.h"
|
| leothedragon |
0:25fa8795676b
|
315
|
|
| leothedragon |
0:25fa8795676b
|
316
|
#endif /* PAL_MBEDTLS_USER_CONFIG_H */
|