The root CA used so far (GlobalSign R2) is about to expire soon (December 2021) and Google have switched to a new certificate, signed by GlobalSign R1 (valid until 2028). Therefore we need to replace the root CA used by the sample to the new one, in order to establish secure connection to with google.com. Additionally, the new certificate chain sent by Google is larger again, so it's needed to increase mbed TLS max content length parameter in order to process it correctly. This also implies an increase in heap usage, so increase the heap size as well. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
11 lines
225 B
Plaintext
11 lines
225 B
Plaintext
CONFIG_MAIN_STACK_SIZE=4096
|
|
|
|
# TLS configuration
|
|
CONFIG_MBEDTLS=y
|
|
CONFIG_MBEDTLS_BUILTIN=y
|
|
CONFIG_MBEDTLS_ENABLE_HEAP=y
|
|
CONFIG_MBEDTLS_HEAP_SIZE=40000
|
|
CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=7168
|
|
|
|
CONFIG_NET_SOCKETS_SOCKOPT_TLS=y
|