From 640c27611a24f5937af7b2f727de337ec1a34cb2 Mon Sep 17 00:00:00 2001 From: Jason2866 <24528715+Jason2866@users.noreply.github.com> Date: Thu, 12 Oct 2023 21:37:22 +0200 Subject: [PATCH] clean up --- configs/defconfig.common | 28 +++++++++++++++------------- 1 file changed, 15 insertions(+), 13 deletions(-) diff --git a/configs/defconfig.common b/configs/defconfig.common index c97349109..e919ac673 100644 --- a/configs/defconfig.common +++ b/configs/defconfig.common @@ -88,15 +88,18 @@ CONFIG_LWIP_TCP_RECVMBOX_SIZE=16 CONFIG_LWIP_UDP_RECVMBOX_SIZE=64 CONFIG_NEWLIB_NANO_FORMAT=y +# CONFIG_ESP_WIFI_ENTERPRISE_SUPPORT is not set # CONFIG_ESP_WIFI_MBEDTLS_TLS_CLIENT is not set - +# CONFIG_ESP_WIFI_SOFTAP_SAE_SUPPORT is not set # CONFIG_ESP_WIFI_ENABLE_WPA3_OWE_STA is not set CONFIG_ESP_WIFI_ESPNOW_MAX_ENCRYPT_NUM=0 +# CONFIG_ESP_WIFI_MBEDTLS_CRYPTO is not set +CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=y CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=y -# CONFIG_ESP_WIFI_ENTERPRISE_SUPPORT is not set +CONFIG_MBEDTLS_TLS_DISABLED=y CONFIG_MBEDTLS_ASYMMETRIC_CONTENT_LEN=y -CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_MAX_CERTS=100 +CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_MAX_CERTS=10 # CONFIG_MBEDTLS_SSL_KEEP_PEER_CERTIFICATE is not set # CONFIG_MBEDTLS_PKCS7_C is not set @@ -104,7 +107,7 @@ CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_MAX_CERTS=100 # # Symmetric Ciphers # -# CONFIG_MBEDTLS_AES_C is not set +CONFIG_MBEDTLS_AES_C=y # CONFIG_MBEDTLS_CAMELLIA_C is not set # CONFIG_MBEDTLS_DES_C is not set # CONFIG_MBEDTLS_BLOWFISH_C is not set @@ -114,11 +117,11 @@ CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_MAX_CERTS=100 # CONFIG_MBEDTLS_NIST_KW_C is not set # end of Symmetric Ciphers -# CONFIG_MBEDTLS_RIPEMD160_C is not set # # TLS Key Exchange Methods # + CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y # CONFIG_MBEDTLS_PSK_MODES is not set # CONFIG_MBEDTLS_KEY_EXCHANGE_ELLIPTIC_CURVE is not set @@ -127,13 +130,14 @@ CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y # CONFIG_MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA is not set # CONFIG_MBEDTLS_KEY_EXCHANGE_ECDH_RSA is not set +CONFIG_MBEDTLS_SSL_PROTO_TLS1_2=y # CONFIG_MBEDTLS_SSL_RENEGOTIATION is not set # CONFIG_MBEDTLS_SSL_PROTO_GMTSSL1_1 is not set # CONFIG_MBEDTLS_SSL_PROTO_DTLS is not set # CONFIG_MBEDTLS_SSL_ALPN is not set # CONFIG_MBEDTLS_CLIENT_SSL_SESSION_TICKETS is not set -# CONFIG_MBEDTLS_CMAC_C is not set +CONFIG_MBEDTLS_CMAC_C=y # CONFIG_MBEDTLS_HARDWARE_ECC is not set # CONFIG_MBEDTLS_ECC_OTHER_CURVES_SOFT_FALLBACK is not set # CONFIG_MBEDTLS_HARDWARE_AES is not set @@ -142,6 +146,7 @@ CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y # CONFIG_MBEDTLS_HAVE_TIME is not set # CONFIG_MBEDTLS_ECDSA_DETERMINISTIC is not set # CONFIG_MBEDTLS_SHA512_C is not set +# CONFIG_MBEDTLS_RIPEMD160_C is not set # # Certificates @@ -152,17 +157,16 @@ CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y # CONFIG_MBEDTLS_X509_CSR_PARSE_C is not set # end of Certificates -# CONFIG_MBEDTLS_ECP_C is not set +CONFIG_MBEDTLS_ECP_C=y +CONFIG_MBEDTLS_ECDH_C=y +CONFIG_MBEDTLS_ECDSA_C=y +CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED=y # CONFIG_MBEDTLS_DHM_C is not set -# CONFIG_MBEDTLS_ECDH_C is not set -# CONFIG_MBEDTLS_ECDSA_C is not set # CONFIG_MBEDTLS_ECJPAKE_C is not set - # CONFIG_MBEDTLS_CLIENT_SSL_SESSION_TICKETS is not set # CONFIG_MBEDTLS_SERVER_SSL_SESSION_TICKETS is not set # CONFIG_MBEDTLS_ECP_DP_SECP192R1_ENABLED is not set # CONFIG_MBEDTLS_ECP_DP_SECP224R1_ENABLED is not set -# CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED is not set # CONFIG_MBEDTLS_ECP_DP_BP256R1_ENABLED is not set # CONFIG_MBEDTLS_ECP_DP_SECP384R1_ENABLED is not set # CONFIG_MBEDTLS_ECP_DP_SECP521R1_ENABLED is not set @@ -173,11 +177,9 @@ CONFIG_MBEDTLS_KEY_EXCHANGE_RSA=y # CONFIG_MBEDTLS_ECP_DP_BP512R1_ENABLED is not set # CONFIG_MBEDTLS_ECP_DP_CURVE25519_ENABLED is not set # CONFIG_MBEDTLS_ECP_FIXED_POINT_OPTIM is not set - # CONFIG_MBEDTLS_ECP_NIST_OPTIM is not set # CONFIG_MBEDTLS_SSL_PROTO_GMTSSL1_1 is not set # CONFIG_MBEDTLS_SSL_PROTO_DTLS is not set -# CONFIG_MBEDTLS_ASYMMETRIC_CONTENT_LEN is not set CONFIG_OPENSSL_ASSERT_DO_NOTHING=y CONFIG_PTHREAD_TASK_STACK_SIZE_DEFAULT=2048