clean up

configs/defconfig.common

@@ -88,23 +88,26 @@ CONFIG_LWIP_TCP_RECVMBOX_SIZE=16
 CONFIG_LWIP_UDP_RECVMBOX_SIZE=64
 CONFIG_NEWLIB_NANO_FORMAT=y
 
+# CONFIG_ESP_WIFI_ENTERPRISE_SUPPORT is not set
 # CONFIG_ESP_WIFI_MBEDTLS_TLS_CLIENT is not set
-
+# CONFIG_ESP_WIFI_SOFTAP_SAE_SUPPORT is not set
 # CONFIG_ESP_WIFI_ENABLE_WPA3_OWE_STA is not set
 CONFIG_ESP_WIFI_ESPNOW_MAX_ENCRYPT_NUM=0
+# CONFIG_ESP_WIFI_MBEDTLS_CRYPTO is not set
 
+CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=y
 CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=y
-# CONFIG_ESP_WIFI_ENTERPRISE_SUPPORT is not set
+CONFIG_MBEDTLS_TLS_DISABLED=y
 CONFIG_MBEDTLS_ASYMMETRIC_CONTENT_LEN=y
-CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_MAX_CERTS=100
+CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_MAX_CERTS=10
 
 # CONFIG_MBEDTLS_SSL_KEEP_PEER_CERTIFICATE is not set
 # CONFIG_MBEDTLS_PKCS7_C is not set
 
 #
 # Symmetric Ciphers
 #
-# CONFIG_MBEDTLS_AES_C is not set
+CONFIG_MBEDTLS_AES_C=y
 # CONFIG_MBEDTLS_CAMELLIA_C is not set
 # CONFIG_MBEDTLS_DES_C is not set
 # CONFIG_MBEDTLS_BLOWFISH_C is not set
@@ -114,11 +117,11 @@ CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_MAX_CERTS=100
 # CONFIG_MBEDTLS_NIST_KW_C is not set
 # end of Symmetric Ciphers
 
-# CONFIG_MBEDTLS_RIPEMD160_C is not set
 
 #
 # TLS Key Exchange Methods
 #
+
 CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y
 # CONFIG_MBEDTLS_PSK_MODES is not set
 # CONFIG_MBEDTLS_KEY_EXCHANGE_ELLIPTIC_CURVE is not set
@@ -127,13 +130,14 @@ CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y
 # CONFIG_MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA is not set
 # CONFIG_MBEDTLS_KEY_EXCHANGE_ECDH_RSA is not set
 
+CONFIG_MBEDTLS_SSL_PROTO_TLS1_2=y
 # CONFIG_MBEDTLS_SSL_RENEGOTIATION is not set
 # CONFIG_MBEDTLS_SSL_PROTO_GMTSSL1_1 is not set
 # CONFIG_MBEDTLS_SSL_PROTO_DTLS is not set
 # CONFIG_MBEDTLS_SSL_ALPN is not set
 # CONFIG_MBEDTLS_CLIENT_SSL_SESSION_TICKETS is not set
 
-# CONFIG_MBEDTLS_CMAC_C is not set
+CONFIG_MBEDTLS_CMAC_C=y
 # CONFIG_MBEDTLS_HARDWARE_ECC is not set
 # CONFIG_MBEDTLS_ECC_OTHER_CURVES_SOFT_FALLBACK is not set
 # CONFIG_MBEDTLS_HARDWARE_AES is not set
@@ -142,6 +146,7 @@ CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y
 # CONFIG_MBEDTLS_HAVE_TIME is not set
 # CONFIG_MBEDTLS_ECDSA_DETERMINISTIC is not set
 # CONFIG_MBEDTLS_SHA512_C is not set
+# CONFIG_MBEDTLS_RIPEMD160_C is not set
 
 #
 # Certificates
@@ -152,17 +157,16 @@ CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y
 # CONFIG_MBEDTLS_X509_CSR_PARSE_C is not set
 # end of Certificates
 
-# CONFIG_MBEDTLS_ECP_C is not set
+CONFIG_MBEDTLS_ECP_C=y
+CONFIG_MBEDTLS_ECDH_C=y
+CONFIG_MBEDTLS_ECDSA_C=y
+CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED=y
 # CONFIG_MBEDTLS_DHM_C is not set
-# CONFIG_MBEDTLS_ECDH_C is not set
-# CONFIG_MBEDTLS_ECDSA_C is not set
 # CONFIG_MBEDTLS_ECJPAKE_C is not set
-
 # CONFIG_MBEDTLS_CLIENT_SSL_SESSION_TICKETS is not set
 # CONFIG_MBEDTLS_SERVER_SSL_SESSION_TICKETS is not set
 # CONFIG_MBEDTLS_ECP_DP_SECP192R1_ENABLED is not set
 # CONFIG_MBEDTLS_ECP_DP_SECP224R1_ENABLED is not set
-# CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED is not set
 # CONFIG_MBEDTLS_ECP_DP_BP256R1_ENABLED is not set
 # CONFIG_MBEDTLS_ECP_DP_SECP384R1_ENABLED is not set
 # CONFIG_MBEDTLS_ECP_DP_SECP521R1_ENABLED is not set
@@ -173,11 +177,9 @@ CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y
 # CONFIG_MBEDTLS_ECP_DP_BP512R1_ENABLED is not set
 # CONFIG_MBEDTLS_ECP_DP_CURVE25519_ENABLED is not set
 # CONFIG_MBEDTLS_ECP_FIXED_POINT_OPTIM is not set
-
 # CONFIG_MBEDTLS_ECP_NIST_OPTIM is not set
 # CONFIG_MBEDTLS_SSL_PROTO_GMTSSL1_1 is not set
 # CONFIG_MBEDTLS_SSL_PROTO_DTLS is not set
-# CONFIG_MBEDTLS_ASYMMETRIC_CONTENT_LEN is not set
 
 CONFIG_OPENSSL_ASSERT_DO_NOTHING=y
 CONFIG_PTHREAD_TASK_STACK_SIZE_DEFAULT=2048