zephyr/modules/mbedtls
Robert Lubos 6ca92495e5 modules: mbedTLS: Add separate Kconfig entry for MBEDTLS_HAVE_TIME_DATE
Currently the MBEDTLS_HAVE_TIME_DATE mbedTLS option is enabled based on
the CONFIG_POSIX_API option. This doesn't seem right, since the enabling
the POSIX API does not guarantee that there is a valid time source in
the system. This was the case for the qemu_x86 platform, where enabling
POSIX_API caused TLS handshake failures due to certificate validation
errors caused by no valid time avaialble in the system.

Fix this by adding a specific KConfig entry for date/time configuration
in mbedTLS. Applications that need to enforce date verification in
mbedTLS should enable it explicitly instead of relying on the
non-obvious implicit configuration.

Fixes #35401

Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no>
2021-06-01 07:30:15 -05:00
..
configs modules: mbedTLS: Add separate Kconfig entry for MBEDTLS_HAVE_TIME_DATE 2021-06-01 07:30:15 -05:00
CMakeLists.txt modules: mbedtls: updates to reflect module directory restructuring 2021-05-09 09:59:22 -05:00
Kconfig mbedtls: kconfig: created MBEDTLS_PROMPTLESS and CUSTOM_MBEDTLS_CFG_FILE 2021-05-09 15:24:23 -05:00
Kconfig.tls-generic modules: mbedTLS: Add separate Kconfig entry for MBEDTLS_HAVE_TIME_DATE 2021-06-01 07:30:15 -05:00
zephyr_init.c