6ca92495e5
Currently the MBEDTLS_HAVE_TIME_DATE mbedTLS option is enabled based on the CONFIG_POSIX_API option. This doesn't seem right, since the enabling the POSIX API does not guarantee that there is a valid time source in the system. This was the case for the qemu_x86 platform, where enabling POSIX_API caused TLS handshake failures due to certificate validation errors caused by no valid time avaialble in the system. Fix this by adding a specific KConfig entry for date/time configuration in mbedTLS. Applications that need to enforce date verification in mbedTLS should enable it explicitly instead of relying on the non-obvious implicit configuration. Fixes #35401 Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no> |
||
|---|---|---|
| .. | ||
| hal_nordic | ||
| mbedtls | ||
| nanopb | ||
| segger | ||
| tensorflow | ||
| TraceRecorder | ||
| trusted-firmware-m | ||
| Kconfig | ||
| Kconfig.altera | ||
| Kconfig.atmel | ||
| Kconfig.canopennode | ||
| Kconfig.civetweb | ||
| Kconfig.cmsis | ||
| Kconfig.cmsis_dsp | ||
| Kconfig.cypress | ||
| Kconfig.eos_s3 | ||
| Kconfig.imx | ||
| Kconfig.infineon | ||
| Kconfig.libmetal | ||
| Kconfig.loramac-node | ||
| Kconfig.mcuboot_bootutil | ||
| Kconfig.mcux | ||
| Kconfig.microchip | ||
| Kconfig.nuvoton | ||
| Kconfig.open-amp | ||
| Kconfig.silabs | ||
| Kconfig.simplelink | ||
| Kconfig.sof | ||
| Kconfig.st | ||
| Kconfig.stm32 | ||
| Kconfig.syst | ||
| Kconfig.tinycbor | ||
| Kconfig.tinycrypt | ||
| Kconfig.vega | ||
| Kconfig.xtensa | ||
| modules.cmake | ||