cb19e26306
This commit also moves the TLS (overlay) configuration to a separate file named "overlay-tls.conf". In this way the simple HTTP (without TLS) will not enable Mbed TLS. A new test case is added to sample.yaml to test HTTPS scenario. Signed-off-by: Valerio Setti <vsetti@baylibre.com>
27 lines
823 B
Plaintext
27 lines
823 B
Plaintext
CONFIG_NET_SAMPLE_HTTPS_SERVICE=y
|
|
|
|
# TLS configuration
|
|
CONFIG_MBEDTLS=y
|
|
CONFIG_MBEDTLS_BUILTIN=y
|
|
CONFIG_MBEDTLS_ENABLE_HEAP=y
|
|
CONFIG_MBEDTLS_HEAP_SIZE=60000
|
|
CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=2048
|
|
CONFIG_NET_SOCKETS_SOCKOPT_TLS=y
|
|
CONFIG_NET_SOCKETS_TLS_MAX_CONTEXTS=6
|
|
CONFIG_TLS_CREDENTIALS=y
|
|
CONFIG_TLS_MAX_CREDENTIALS_NUMBER=5
|
|
CONFIG_PSA_WANT_ALG_ECDH=y
|
|
CONFIG_PSA_WANT_ALG_ECDSA=y
|
|
CONFIG_PSA_WANT_ECC_SECP_R1_256=y
|
|
CONFIG_PSA_WANT_KEY_TYPE_ECC_PUBLIC_KEY=y
|
|
CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_IMPORT=y
|
|
CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_EXPORT=y
|
|
CONFIG_PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_GENERATE=y
|
|
CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED=y
|
|
CONFIG_PSA_WANT_ALG_CCM=y
|
|
CONFIG_PSA_WANT_ALG_GCM=y
|
|
CONFIG_MBEDTLS_PK_WRITE_C=y
|
|
CONFIG_PSA_WANT_ALG_TLS12_PRF=y
|
|
CONFIG_PSA_WANT_ALG_SHA_1=y
|
|
CONFIG_PSA_WANT_ALG_SHA_256=y
|