bartoszek/zephyr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

mbedtls: add kconfig options

Browse Source 
Add MBEDTLS_NIST_KW_C, MBEDTLS_DHM_C and X509 CRL, CSR options.

Signed-off-by: Fengming Ye <frank.ye@nxp.com>
This commit is contained in:
Fengming Ye 2024-05-27 19:05:43 +09:00 committed by Anas Nashif
parent 1bfa73d036
commit edd0ed7339
2 changed files with 49 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
modules/mbedtls/Kconfig.tls-generic
View File

@ -510,4 +510,32 @@ config MBEDTLS_SSL_DTLS_CONNECTION_ID
which allows to identify DTLS connections across changes
in the underlying transport.
config MBEDTLS_NIST_KW_C
bool "NIST key wrap"
depends on MBEDTLS_CIPHER_AES_ENABLED
help
Key Wrapping mode for 128-bit block ciphers,
as defined in NIST SP 800-38F.
config MBEDTLS_DHM_C
bool "Diffie-Hellman-Merkle mode"
help
Used by the following key exchanges,
DHE-RSA, DHE-PSK
config MBEDTLS_X509_CRL_PARSE_C
bool "X509 CRL parsing"
help
Used by X509 CRL parsing
config MBEDTLS_X509_CSR_WRITE_C
bool "X509 Certificate Signing Requests writing"
help
For X.509 certificate request writing.
config MBEDTLS_X509_CSR_PARSE_C
bool "X509 Certificate Signing Request parsing"
help
For reading X.509 certificate request.
endmenu

21
modules/mbedtls/configs/config-tls-generic.h
View File

@ -485,6 +485,27 @@
#define MBEDTLS_SSL_DTLS_CONNECTION_ID
#endif
#if defined(CONFIG_MBEDTLS_NIST_KW_C)
#define MBEDTLS_NIST_KW_C
#endif
#if defined(CONFIG_MBEDTLS_DHM_C)
#define MBEDTLS_DHM_C
#endif
#if defined(CONFIG_MBEDTLS_X509_CRL_PARSE_C)
#define MBEDTLS_X509_CRL_PARSE_C
#endif
#if defined(CONFIG_MBEDTLS_X509_CSR_WRITE_C)
#define MBEDTLS_X509_CSR_WRITE_C
#define MBEDTLS_X509_CREATE_C
#endif
#if defined(CONFIG_MBEDTLS_X509_CSR_PARSE_C)
#define MBEDTLS_X509_CSR_PARSE_C
#endif
#if defined(CONFIG_MBEDTLS_USER_CONFIG_FILE)
#include CONFIG_MBEDTLS_USER_CONFIG_FILE
#endif