提交 33e7b22b 编写于 作者: M maoyufeng

Restore cofig file.

Signed-off-by: Nmaoyufeng <maoyufeng3@huawei.com>
上级 e2bc4813
...@@ -53,7 +53,8 @@ ...@@ -53,7 +53,8 @@
#ifndef MBEDTLS_CONFIG_H #ifndef MBEDTLS_CONFIG_H
#define MBEDTLS_CONFIG_H #define MBEDTLS_CONFIG_H
#include <stdio.h>
#include <stdlib.h>
#if defined(_MSC_VER) && !defined(_CRT_SECURE_NO_DEPRECATE) #if defined(_MSC_VER) && !defined(_CRT_SECURE_NO_DEPRECATE)
#define _CRT_SECURE_NO_DEPRECATE 1 #define _CRT_SECURE_NO_DEPRECATE 1
#endif #endif
...@@ -111,7 +112,7 @@ ...@@ -111,7 +112,7 @@
* example, if double-width division is implemented in software, disabling * example, if double-width division is implemented in software, disabling
* it can reduce code size in some embedded targets. * it can reduce code size in some embedded targets.
*/ */
//#define MBEDTLS_NO_UDBL_DIVISION // #define MBEDTLS_NO_UDBL_DIVISION
/** /**
* \def MBEDTLS_NO_64BIT_MULTIPLICATION * \def MBEDTLS_NO_64BIT_MULTIPLICATION
...@@ -133,7 +134,7 @@ ...@@ -133,7 +134,7 @@
* Note that depending on the compiler, this may decrease performance compared * Note that depending on the compiler, this may decrease performance compared
* to using the library function provided by the toolchain. * to using the library function provided by the toolchain.
*/ */
//#define MBEDTLS_NO_64BIT_MULTIPLICATION // #define MBEDTLS_NO_64BIT_MULTIPLICATION
/** /**
* \def MBEDTLS_HAVE_SSE2 * \def MBEDTLS_HAVE_SSE2
...@@ -142,7 +143,7 @@ ...@@ -142,7 +143,7 @@
* *
* Uncomment if the CPU supports SSE2 (IA-32 specific). * Uncomment if the CPU supports SSE2 (IA-32 specific).
*/ */
//#define MBEDTLS_HAVE_SSE2 // #define MBEDTLS_HAVE_SSE2
/** /**
* \def MBEDTLS_HAVE_TIME * \def MBEDTLS_HAVE_TIME
...@@ -178,7 +179,7 @@ ...@@ -178,7 +179,7 @@
* mbedtls_platform_gmtime_r() at compile-time by using the macro * mbedtls_platform_gmtime_r() at compile-time by using the macro
* MBEDTLS_PLATFORM_GMTIME_R_ALT. * MBEDTLS_PLATFORM_GMTIME_R_ALT.
*/ */
#define MBEDTLS_HAVE_TIME_DATE // #define MBEDTLS_HAVE_TIME_DATE
/** /**
* \def MBEDTLS_PLATFORM_MEMORY * \def MBEDTLS_PLATFORM_MEMORY
...@@ -202,7 +203,7 @@ ...@@ -202,7 +203,7 @@
* *
* Enable this layer to allow use of alternative memory allocators. * Enable this layer to allow use of alternative memory allocators.
*/ */
//#define MBEDTLS_PLATFORM_MEMORY #define MBEDTLS_PLATFORM_MEMORY
/** /**
* \def MBEDTLS_PLATFORM_NO_STD_FUNCTIONS * \def MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
...@@ -221,7 +222,7 @@ ...@@ -221,7 +222,7 @@
* Uncomment to prevent default assignment of standard functions in the * Uncomment to prevent default assignment of standard functions in the
* platform layer. * platform layer.
*/ */
//#define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS #define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
/** /**
* \def MBEDTLS_PLATFORM_EXIT_ALT * \def MBEDTLS_PLATFORM_EXIT_ALT
...@@ -246,13 +247,13 @@ ...@@ -246,13 +247,13 @@
* Uncomment a macro to enable alternate implementation of specific base * Uncomment a macro to enable alternate implementation of specific base
* platform function * platform function
*/ */
//#define MBEDTLS_PLATFORM_EXIT_ALT // #define MBEDTLS_PLATFORM_EXIT_ALT
//#define MBEDTLS_PLATFORM_TIME_ALT #define MBEDTLS_PLATFORM_TIME_ALT
//#define MBEDTLS_PLATFORM_FPRINTF_ALT // #define MBEDTLS_PLATFORM_FPRINTF_ALT
//#define MBEDTLS_PLATFORM_PRINTF_ALT // #define MBEDTLS_PLATFORM_PRINTF_ALT
//#define MBEDTLS_PLATFORM_SNPRINTF_ALT #define MBEDTLS_PLATFORM_SNPRINTF_ALT
//#define MBEDTLS_PLATFORM_NV_SEED_ALT // #define MBEDTLS_PLATFORM_NV_SEED_ALT
//#define MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT // #define MBEDTLS_PLATFORM_SETUP_TEARDOWN_ALT
/** /**
* \def MBEDTLS_DEPRECATED_WARNING * \def MBEDTLS_DEPRECATED_WARNING
...@@ -267,7 +268,7 @@ ...@@ -267,7 +268,7 @@
* *
* Uncomment to get warnings on using deprecated functions. * Uncomment to get warnings on using deprecated functions.
*/ */
//#define MBEDTLS_DEPRECATED_WARNING // #define MBEDTLS_DEPRECATED_WARNING
/** /**
* \def MBEDTLS_DEPRECATED_REMOVED * \def MBEDTLS_DEPRECATED_REMOVED
...@@ -279,7 +280,7 @@ ...@@ -279,7 +280,7 @@
* *
* Uncomment to get errors on using deprecated functions. * Uncomment to get errors on using deprecated functions.
*/ */
//#define MBEDTLS_DEPRECATED_REMOVED // #define MBEDTLS_DEPRECATED_REMOVED
/** /**
* \def MBEDTLS_CHECK_PARAMS * \def MBEDTLS_CHECK_PARAMS
...@@ -331,7 +332,7 @@ ...@@ -331,7 +332,7 @@
* *
* Uncomment to enable validation of application-controlled parameters. * Uncomment to enable validation of application-controlled parameters.
*/ */
//#define MBEDTLS_CHECK_PARAMS // #define MBEDTLS_CHECK_PARAMS
/** /**
* \def MBEDTLS_CHECK_PARAMS_ASSERT * \def MBEDTLS_CHECK_PARAMS_ASSERT
...@@ -345,7 +346,7 @@ ...@@ -345,7 +346,7 @@
* *
* Uncomment to allow MBEDTLS_PARAM_FAILED() to call `assert`. * Uncomment to allow MBEDTLS_PARAM_FAILED() to call `assert`.
*/ */
//#define MBEDTLS_CHECK_PARAMS_ASSERT // #define MBEDTLS_CHECK_PARAMS_ASSERT
/* \} name SECTION: System support */ /* \} name SECTION: System support */
...@@ -368,7 +369,7 @@ ...@@ -368,7 +369,7 @@
* You will need to provide a header "timing_alt.h" and an implementation at * You will need to provide a header "timing_alt.h" and an implementation at
* compile time. * compile time.
*/ */
//#define MBEDTLS_TIMING_ALT // #define MBEDTLS_TIMING_ALT
/** /**
* \def MBEDTLS_AES_ALT * \def MBEDTLS_AES_ALT
...@@ -395,30 +396,30 @@ ...@@ -395,30 +396,30 @@
* digests and ciphers instead. * digests and ciphers instead.
* *
*/ */
//#define MBEDTLS_AES_ALT // #define MBEDTLS_AES_ALT
//#define MBEDTLS_ARC4_ALT // #define MBEDTLS_ARC4_ALT
//#define MBEDTLS_ARIA_ALT // #define MBEDTLS_ARIA_ALT
//#define MBEDTLS_BLOWFISH_ALT // #define MBEDTLS_BLOWFISH_ALT
//#define MBEDTLS_CAMELLIA_ALT // #define MBEDTLS_CAMELLIA_ALT
//#define MBEDTLS_CCM_ALT // #define MBEDTLS_CCM_ALT
//#define MBEDTLS_CHACHA20_ALT // #define MBEDTLS_CHACHA20_ALT
//#define MBEDTLS_CHACHAPOLY_ALT // #define MBEDTLS_CHACHAPOLY_ALT
//#define MBEDTLS_CMAC_ALT // #define MBEDTLS_CMAC_ALT
//#define MBEDTLS_DES_ALT // #define MBEDTLS_DES_ALT
//#define MBEDTLS_DHM_ALT // #define MBEDTLS_DHM_ALT
//#define MBEDTLS_ECJPAKE_ALT // #define MBEDTLS_ECJPAKE_ALT
//#define MBEDTLS_GCM_ALT // #define MBEDTLS_GCM_ALT
//#define MBEDTLS_NIST_KW_ALT // #define MBEDTLS_NIST_KW_ALT
//#define MBEDTLS_MD2_ALT // #define MBEDTLS_MD2_ALT
//#define MBEDTLS_MD4_ALT // #define MBEDTLS_MD4_ALT
//#define MBEDTLS_MD5_ALT // #define MBEDTLS_MD5_ALT
//#define MBEDTLS_POLY1305_ALT // #define MBEDTLS_POLY1305_ALT
//#define MBEDTLS_RIPEMD160_ALT // #define MBEDTLS_RIPEMD160_ALT
//#define MBEDTLS_RSA_ALT // #define MBEDTLS_RSA_ALT
//#define MBEDTLS_SHA1_ALT // #define MBEDTLS_SHA1_ALT
//#define MBEDTLS_SHA256_ALT // #define MBEDTLS_SHA256_ALT
//#define MBEDTLS_SHA512_ALT // #define MBEDTLS_SHA512_ALT
//#define MBEDTLS_XTEA_ALT // #define MBEDTLS_XTEA_ALT
/* /*
* When replacing the elliptic curve module, pleace consider, that it is * When replacing the elliptic curve module, pleace consider, that it is
...@@ -429,7 +430,7 @@ ...@@ -429,7 +430,7 @@
* macros as described above. The only difference is that you have to make sure * macros as described above. The only difference is that you have to make sure
* that you provide functionality for both .c files. * that you provide functionality for both .c files.
*/ */
//#define MBEDTLS_ECP_ALT // #define MBEDTLS_ECP_ALT
/** /**
* \def MBEDTLS_MD2_PROCESS_ALT * \def MBEDTLS_MD2_PROCESS_ALT
...@@ -476,25 +477,25 @@ ...@@ -476,25 +477,25 @@
* desirable). * desirable).
* *
*/ */
//#define MBEDTLS_MD2_PROCESS_ALT // #define MBEDTLS_MD2_PROCESS_ALT
//#define MBEDTLS_MD4_PROCESS_ALT // #define MBEDTLS_MD4_PROCESS_ALT
//#define MBEDTLS_MD5_PROCESS_ALT // #define MBEDTLS_MD5_PROCESS_ALT
//#define MBEDTLS_RIPEMD160_PROCESS_ALT // #define MBEDTLS_RIPEMD160_PROCESS_ALT
//#define MBEDTLS_SHA1_PROCESS_ALT // #define MBEDTLS_SHA1_PROCESS_ALT
//#define MBEDTLS_SHA256_PROCESS_ALT // #define MBEDTLS_SHA256_PROCESS_ALT
//#define MBEDTLS_SHA512_PROCESS_ALT // #define MBEDTLS_SHA512_PROCESS_ALT
//#define MBEDTLS_DES_SETKEY_ALT // #define MBEDTLS_DES_SETKEY_ALT
//#define MBEDTLS_DES_CRYPT_ECB_ALT // #define MBEDTLS_DES_CRYPT_ECB_ALT
//#define MBEDTLS_DES3_CRYPT_ECB_ALT // #define MBEDTLS_DES3_CRYPT_ECB_ALT
//#define MBEDTLS_AES_SETKEY_ENC_ALT // #define MBEDTLS_AES_SETKEY_ENC_ALT
//#define MBEDTLS_AES_SETKEY_DEC_ALT // #define MBEDTLS_AES_SETKEY_DEC_ALT
//#define MBEDTLS_AES_ENCRYPT_ALT // #define MBEDTLS_AES_ENCRYPT_ALT
//#define MBEDTLS_AES_DECRYPT_ALT // #define MBEDTLS_AES_DECRYPT_ALT
//#define MBEDTLS_ECDH_GEN_PUBLIC_ALT // #define MBEDTLS_ECDH_GEN_PUBLIC_ALT
//#define MBEDTLS_ECDH_COMPUTE_SHARED_ALT // #define MBEDTLS_ECDH_COMPUTE_SHARED_ALT
//#define MBEDTLS_ECDSA_VERIFY_ALT // #define MBEDTLS_ECDSA_VERIFY_ALT
//#define MBEDTLS_ECDSA_SIGN_ALT // #define MBEDTLS_ECDSA_SIGN_ALT
//#define MBEDTLS_ECDSA_GENKEY_ALT // #define MBEDTLS_ECDSA_GENKEY_ALT
/** /**
* \def MBEDTLS_ECP_INTERNAL_ALT * \def MBEDTLS_ECP_INTERNAL_ALT
...@@ -537,17 +538,17 @@ ...@@ -537,17 +538,17 @@
* function. * function.
*/ */
/* Required for all the functions in this section */ /* Required for all the functions in this section */
//#define MBEDTLS_ECP_INTERNAL_ALT // #define MBEDTLS_ECP_INTERNAL_ALT
/* Support for Weierstrass curves with Jacobi representation */ /* Support for Weierstrass curves with Jacobi representation */
//#define MBEDTLS_ECP_RANDOMIZE_JAC_ALT // #define MBEDTLS_ECP_RANDOMIZE_JAC_ALT
//#define MBEDTLS_ECP_ADD_MIXED_ALT // #define MBEDTLS_ECP_ADD_MIXED_ALT
//#define MBEDTLS_ECP_DOUBLE_JAC_ALT // #define MBEDTLS_ECP_DOUBLE_JAC_ALT
//#define MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT // #define MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT
//#define MBEDTLS_ECP_NORMALIZE_JAC_ALT // #define MBEDTLS_ECP_NORMALIZE_JAC_ALT
/* Support for curves with Montgomery arithmetic */ /* Support for curves with Montgomery arithmetic */
//#define MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT // #define MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT
//#define MBEDTLS_ECP_RANDOMIZE_MXZ_ALT // #define MBEDTLS_ECP_RANDOMIZE_MXZ_ALT
//#define MBEDTLS_ECP_NORMALIZE_MXZ_ALT // #define MBEDTLS_ECP_NORMALIZE_MXZ_ALT
/** /**
* \def MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN * \def MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
...@@ -564,7 +565,7 @@ ...@@ -564,7 +565,7 @@
* *
* Uncomment to enable testing of the constant-flow nature of selected code. * Uncomment to enable testing of the constant-flow nature of selected code.
*/ */
//#define MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN // #define MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN
/** /**
* \def MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND * \def MBEDTLS_TEST_CONSTANT_FLOW_VALGRIND
...@@ -600,7 +601,7 @@ ...@@ -600,7 +601,7 @@
* Requires MBEDTLS_ENTROPY_C, MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES * Requires MBEDTLS_ENTROPY_C, MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
* *
*/ */
//#define MBEDTLS_TEST_NULL_ENTROPY // #define MBEDTLS_TEST_NULL_ENTROPY
/** /**
* \def MBEDTLS_ENTROPY_HARDWARE_ALT * \def MBEDTLS_ENTROPY_HARDWARE_ALT
...@@ -613,7 +614,7 @@ ...@@ -613,7 +614,7 @@
* *
* Uncomment to use your own hardware entropy collector. * Uncomment to use your own hardware entropy collector.
*/ */
//#define MBEDTLS_ENTROPY_HARDWARE_ALT // #define MBEDTLS_ENTROPY_HARDWARE_ALT
/** /**
* \def MBEDTLS_AES_ROM_TABLES * \def MBEDTLS_AES_ROM_TABLES
...@@ -633,7 +634,7 @@ ...@@ -633,7 +634,7 @@
* This option is independent of \c MBEDTLS_AES_FEWER_TABLES. * This option is independent of \c MBEDTLS_AES_FEWER_TABLES.
* *
*/ */
//#define MBEDTLS_AES_ROM_TABLES #define MBEDTLS_AES_ROM_TABLES
/** /**
* \def MBEDTLS_AES_FEWER_TABLES * \def MBEDTLS_AES_FEWER_TABLES
...@@ -655,7 +656,7 @@ ...@@ -655,7 +656,7 @@
* This option is independent of \c MBEDTLS_AES_ROM_TABLES. * This option is independent of \c MBEDTLS_AES_ROM_TABLES.
* *
*/ */
//#define MBEDTLS_AES_FEWER_TABLES // #define MBEDTLS_AES_FEWER_TABLES
/** /**
* \def MBEDTLS_CAMELLIA_SMALL_MEMORY * \def MBEDTLS_CAMELLIA_SMALL_MEMORY
...@@ -664,7 +665,7 @@ ...@@ -664,7 +665,7 @@
* *
* Uncomment this macro to use less memory for Camellia. * Uncomment this macro to use less memory for Camellia.
*/ */
//#define MBEDTLS_CAMELLIA_SMALL_MEMORY // #define MBEDTLS_CAMELLIA_SMALL_MEMORY
/** /**
* \def MBEDTLS_CIPHER_MODE_CBC * \def MBEDTLS_CIPHER_MODE_CBC
...@@ -732,7 +733,7 @@ ...@@ -732,7 +733,7 @@
* *
* Uncomment this macro to enable the NULL cipher and ciphersuites * Uncomment this macro to enable the NULL cipher and ciphersuites
*/ */
//#define MBEDTLS_CIPHER_NULL_CIPHER // #define MBEDTLS_CIPHER_NULL_CIPHER
/** /**
* \def MBEDTLS_CIPHER_PADDING_PKCS7 * \def MBEDTLS_CIPHER_PADDING_PKCS7
...@@ -755,7 +756,7 @@ ...@@ -755,7 +756,7 @@
* Uncomment this macro to use a 128-bit key in the CTR_DRBG module. * Uncomment this macro to use a 128-bit key in the CTR_DRBG module.
* By default, CTR_DRBG uses a 256-bit key. * By default, CTR_DRBG uses a 256-bit key.
*/ */
//#define MBEDTLS_CTR_DRBG_USE_128_BIT_KEY // #define MBEDTLS_CTR_DRBG_USE_128_BIT_KEY
/** /**
* \def MBEDTLS_ENABLE_WEAK_CIPHERSUITES * \def MBEDTLS_ENABLE_WEAK_CIPHERSUITES
...@@ -773,7 +774,7 @@ ...@@ -773,7 +774,7 @@
* \warning DES is considered a weak cipher and its use constitutes a * \warning DES is considered a weak cipher and its use constitutes a
* security risk. We recommend considering stronger ciphers instead. * security risk. We recommend considering stronger ciphers instead.
*/ */
//#define MBEDTLS_ENABLE_WEAK_CIPHERSUITES // #define MBEDTLS_ENABLE_WEAK_CIPHERSUITES
/** /**
* \def MBEDTLS_REMOVE_ARC4_CIPHERSUITES * \def MBEDTLS_REMOVE_ARC4_CIPHERSUITES
...@@ -786,7 +787,7 @@ ...@@ -786,7 +787,7 @@
* *
* Uncomment this macro to remove RC4 ciphersuites by default. * Uncomment this macro to remove RC4 ciphersuites by default.
*/ */
#define MBEDTLS_REMOVE_ARC4_CIPHERSUITES // #define MBEDTLS_REMOVE_ARC4_CIPHERSUITES
/** /**
* \def MBEDTLS_REMOVE_3DES_CIPHERSUITES * \def MBEDTLS_REMOVE_3DES_CIPHERSUITES
...@@ -885,7 +886,7 @@ ...@@ -885,7 +886,7 @@
* elliptic curve functionality. It is incompatible with * elliptic curve functionality. It is incompatible with
* MBEDTLS_ECP_ALT, MBEDTLS_ECDH_XXX_ALT and MBEDTLS_ECDSA_XXX_ALT. * MBEDTLS_ECP_ALT, MBEDTLS_ECDH_XXX_ALT and MBEDTLS_ECDSA_XXX_ALT.
*/ */
//#define MBEDTLS_ECP_RESTARTABLE // #define MBEDTLS_ECP_RESTARTABLE
/** /**
* \def MBEDTLS_ECDSA_DETERMINISTIC * \def MBEDTLS_ECDSA_DETERMINISTIC
...@@ -899,7 +900,7 @@ ...@@ -899,7 +900,7 @@
* *
* Comment this macro to disable deterministic ECDSA. * Comment this macro to disable deterministic ECDSA.
*/ */
#define MBEDTLS_ECDSA_DETERMINISTIC // #define MBEDTLS_ECDSA_DETERMINISTIC
/** /**
* \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
...@@ -921,7 +922,7 @@ ...@@ -921,7 +922,7 @@
* MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA * MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
* MBEDTLS_TLS_PSK_WITH_RC4_128_SHA * MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
*/ */
#define MBEDTLS_KEY_EXCHANGE_PSK_ENABLED // #define MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
/** /**
* \def MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED * \def MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
...@@ -952,7 +953,7 @@ ...@@ -952,7 +953,7 @@
* See dhm.h for more details. * See dhm.h for more details.
* *
*/ */
#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED // #define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
/** /**
* \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
...@@ -972,7 +973,7 @@ ...@@ -972,7 +973,7 @@
* MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
* MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
*/ */
#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED // #define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
/** /**
* \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
...@@ -997,7 +998,7 @@ ...@@ -997,7 +998,7 @@
* MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
* MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
*/ */
#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED // #define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
/** /**
* \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
...@@ -1025,7 +1026,7 @@ ...@@ -1025,7 +1026,7 @@
* MBEDTLS_TLS_RSA_WITH_RC4_128_SHA * MBEDTLS_TLS_RSA_WITH_RC4_128_SHA
* MBEDTLS_TLS_RSA_WITH_RC4_128_MD5 * MBEDTLS_TLS_RSA_WITH_RC4_128_MD5
*/ */
#define MBEDTLS_KEY_EXCHANGE_RSA_ENABLED // #define MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
/** /**
* \def MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED * \def MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
...@@ -1058,7 +1059,7 @@ ...@@ -1058,7 +1059,7 @@
* See dhm.h for more details. * See dhm.h for more details.
* *
*/ */
#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED // #define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
/** /**
* \def MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED * \def MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
...@@ -1107,7 +1108,7 @@ ...@@ -1107,7 +1108,7 @@
* MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA * MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
* MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA * MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
*/ */
#define MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED // #define MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
/** /**
* \def MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED * \def MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
...@@ -1131,7 +1132,7 @@ ...@@ -1131,7 +1132,7 @@
* MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
* MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
*/ */
#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED // #define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
/** /**
* \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
...@@ -1155,7 +1156,7 @@ ...@@ -1155,7 +1156,7 @@
* MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
* MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
*/ */
#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED // #define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
/** /**
* \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
...@@ -1174,7 +1175,7 @@ ...@@ -1174,7 +1175,7 @@
* enabled as well): * enabled as well):
* MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8 * MBEDTLS_TLS_ECJPAKE_WITH_AES_128_CCM_8
*/ */
//#define MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED // #define MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
/** /**
* \def MBEDTLS_PK_PARSE_EC_EXTENDED * \def MBEDTLS_PK_PARSE_EC_EXTENDED
...@@ -1188,7 +1189,7 @@ ...@@ -1188,7 +1189,7 @@
* *
* Disable if you only need to support RFC 5915 + 5480 key formats. * Disable if you only need to support RFC 5915 + 5480 key formats.
*/ */
#define MBEDTLS_PK_PARSE_EC_EXTENDED // #define MBEDTLS_PK_PARSE_EC_EXTENDED
/** /**
* \def MBEDTLS_ERROR_STRERROR_DUMMY * \def MBEDTLS_ERROR_STRERROR_DUMMY
...@@ -1232,7 +1233,7 @@ ...@@ -1232,7 +1233,7 @@
* *
* Uncomment this macro to prevent loading of default entropy functions. * Uncomment this macro to prevent loading of default entropy functions.
*/ */
//#define MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES // #define MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
/** /**
* \def MBEDTLS_NO_PLATFORM_ENTROPY * \def MBEDTLS_NO_PLATFORM_ENTROPY
...@@ -1243,7 +1244,7 @@ ...@@ -1243,7 +1244,7 @@
* *
* Uncomment this macro to disable the built-in platform entropy functions. * Uncomment this macro to disable the built-in platform entropy functions.
*/ */
//#define MBEDTLS_NO_PLATFORM_ENTROPY // #define MBEDTLS_NO_PLATFORM_ENTROPY
/** /**
* \def MBEDTLS_ENTROPY_FORCE_SHA256 * \def MBEDTLS_ENTROPY_FORCE_SHA256
...@@ -1259,7 +1260,7 @@ ...@@ -1259,7 +1260,7 @@
* This option is only useful if both MBEDTLS_SHA256_C and * This option is only useful if both MBEDTLS_SHA256_C and
* MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used. * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
*/ */
//#define MBEDTLS_ENTROPY_FORCE_SHA256 // #define MBEDTLS_ENTROPY_FORCE_SHA256
/** /**
* \def MBEDTLS_ENTROPY_NV_SEED * \def MBEDTLS_ENTROPY_NV_SEED
...@@ -1287,7 +1288,7 @@ ...@@ -1287,7 +1288,7 @@
* \note The entropy collector will write to the seed file before entropy is * \note The entropy collector will write to the seed file before entropy is
* given to an external source, to update it. * given to an external source, to update it.
*/ */
//#define MBEDTLS_ENTROPY_NV_SEED // #define MBEDTLS_ENTROPY_NV_SEED
/** /**
* \def MBEDTLS_MEMORY_DEBUG * \def MBEDTLS_MEMORY_DEBUG
...@@ -1300,7 +1301,7 @@ ...@@ -1300,7 +1301,7 @@
* *
* Uncomment this macro to let the buffer allocator print out error messages. * Uncomment this macro to let the buffer allocator print out error messages.
*/ */
//#define MBEDTLS_MEMORY_DEBUG // #define MBEDTLS_MEMORY_DEBUG
/** /**
* \def MBEDTLS_MEMORY_BACKTRACE * \def MBEDTLS_MEMORY_BACKTRACE
...@@ -1312,7 +1313,7 @@ ...@@ -1312,7 +1313,7 @@
* *
* Uncomment this macro to include backtrace information * Uncomment this macro to include backtrace information
*/ */
//#define MBEDTLS_MEMORY_BACKTRACE // #define MBEDTLS_MEMORY_BACKTRACE
/** /**
* \def MBEDTLS_PK_RSA_ALT_SUPPORT * \def MBEDTLS_PK_RSA_ALT_SUPPORT
...@@ -1354,14 +1355,14 @@ ...@@ -1354,14 +1355,14 @@
* Uncomment this macro to disable the use of CRT in RSA. * Uncomment this macro to disable the use of CRT in RSA.
* *
*/ */
//#define MBEDTLS_RSA_NO_CRT // #define MBEDTLS_RSA_NO_CRT
/** /**
* \def MBEDTLS_SELF_TEST * \def MBEDTLS_SELF_TEST
* *
* Enable the checkup functions (*_self_test). * Enable the checkup functions (*_self_test).
*/ */
#define MBEDTLS_SELF_TEST // #define MBEDTLS_SELF_TEST
/** /**
* \def MBEDTLS_SHA256_SMALLER * \def MBEDTLS_SHA256_SMALLER
...@@ -1377,7 +1378,7 @@ ...@@ -1377,7 +1378,7 @@
* *
* Uncomment to enable the smaller implementation of SHA256. * Uncomment to enable the smaller implementation of SHA256.
*/ */
//#define MBEDTLS_SHA256_SMALLER // #define MBEDTLS_SHA256_SMALLER
/** /**
* \def MBEDTLS_SSL_ALL_ALERT_MESSAGES * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
...@@ -1402,7 +1403,7 @@ ...@@ -1402,7 +1403,7 @@
* operation inside the library. * operation inside the library.
* *
*/ */
//#define MBEDTLS_SSL_ASYNC_PRIVATE // #define MBEDTLS_SSL_ASYNC_PRIVATE
/** /**
* \def MBEDTLS_SSL_DEBUG_ALL * \def MBEDTLS_SSL_DEBUG_ALL
...@@ -1418,7 +1419,7 @@ ...@@ -1418,7 +1419,7 @@
* a timing side-channel. * a timing side-channel.
* *
*/ */
//#define MBEDTLS_SSL_DEBUG_ALL // #define MBEDTLS_SSL_DEBUG_ALL
/** \def MBEDTLS_SSL_ENCRYPT_THEN_MAC /** \def MBEDTLS_SSL_ENCRYPT_THEN_MAC
* *
...@@ -1481,7 +1482,7 @@ ...@@ -1481,7 +1482,7 @@
* *
* Uncomment this macro to enable hooking functions. * Uncomment this macro to enable hooking functions.
*/ */
//#define MBEDTLS_SSL_HW_RECORD_ACCEL // #define MBEDTLS_SSL_HW_RECORD_ACCEL
/** /**
* \def MBEDTLS_SSL_CBC_RECORD_SPLITTING * \def MBEDTLS_SSL_CBC_RECORD_SPLITTING
...@@ -1525,7 +1526,7 @@ ...@@ -1525,7 +1526,7 @@
* *
* Uncomment this macro to enable support for SSLv2 Client Hello messages. * Uncomment this macro to enable support for SSLv2 Client Hello messages.
*/ */
//#define MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO // #define MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
/** /**
* \def MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE * \def MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE
...@@ -1535,7 +1536,7 @@ ...@@ -1535,7 +1536,7 @@
* *
* Uncomment this macro to respect client's ciphersuite order * Uncomment this macro to respect client's ciphersuite order
*/ */
//#define MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE // #define MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE
/** /**
* \def MBEDTLS_SSL_MAX_FRAGMENT_LENGTH * \def MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
...@@ -1556,7 +1557,7 @@ ...@@ -1556,7 +1557,7 @@
* *
* Comment this macro to disable support for SSL 3.0 * Comment this macro to disable support for SSL 3.0
*/ */
//#define MBEDTLS_SSL_PROTO_SSL3 // #define MBEDTLS_SSL_PROTO_SSL3
/** /**
* \def MBEDTLS_SSL_PROTO_TLS1 * \def MBEDTLS_SSL_PROTO_TLS1
...@@ -1607,7 +1608,7 @@ ...@@ -1607,7 +1608,7 @@
* *
* Comment this macro to disable support for DTLS * Comment this macro to disable support for DTLS
*/ */
#define MBEDTLS_SSL_PROTO_DTLS // #define MBEDTLS_SSL_PROTO_DTLS
/** /**
* \def MBEDTLS_SSL_ALPN * \def MBEDTLS_SSL_ALPN
...@@ -1616,7 +1617,7 @@ ...@@ -1616,7 +1617,7 @@
* *
* Comment this macro to disable support for ALPN. * Comment this macro to disable support for ALPN.
*/ */
#define MBEDTLS_SSL_ALPN // #define MBEDTLS_SSL_ALPN
/** /**
* \def MBEDTLS_SSL_DTLS_ANTI_REPLAY * \def MBEDTLS_SSL_DTLS_ANTI_REPLAY
...@@ -1631,7 +1632,7 @@ ...@@ -1631,7 +1632,7 @@
* *
* Comment this to disable anti-replay in DTLS. * Comment this to disable anti-replay in DTLS.
*/ */
#define MBEDTLS_SSL_DTLS_ANTI_REPLAY // #define MBEDTLS_SSL_DTLS_ANTI_REPLAY
/** /**
* \def MBEDTLS_SSL_DTLS_HELLO_VERIFY * \def MBEDTLS_SSL_DTLS_HELLO_VERIFY
...@@ -1649,7 +1650,7 @@ ...@@ -1649,7 +1650,7 @@
* *
* Comment this to disable support for HelloVerifyRequest. * Comment this to disable support for HelloVerifyRequest.
*/ */
#define MBEDTLS_SSL_DTLS_HELLO_VERIFY // #define MBEDTLS_SSL_DTLS_HELLO_VERIFY
/** /**
* \def MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE * \def MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
...@@ -1665,7 +1666,7 @@ ...@@ -1665,7 +1666,7 @@
* *
* Comment this to disable support for clients reusing the source port. * Comment this to disable support for clients reusing the source port.
*/ */
#define MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE // #define MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
/** /**
* \def MBEDTLS_SSL_DTLS_BADMAC_LIMIT * \def MBEDTLS_SSL_DTLS_BADMAC_LIMIT
...@@ -1676,7 +1677,7 @@ ...@@ -1676,7 +1677,7 @@
* *
* Requires: MBEDTLS_SSL_PROTO_DTLS * Requires: MBEDTLS_SSL_PROTO_DTLS
*/ */
#define MBEDTLS_SSL_DTLS_BADMAC_LIMIT // #define MBEDTLS_SSL_DTLS_BADMAC_LIMIT
/** /**
* \def MBEDTLS_SSL_SESSION_TICKETS * \def MBEDTLS_SSL_SESSION_TICKETS
...@@ -1744,7 +1745,7 @@ ...@@ -1744,7 +1745,7 @@
* *
* Requires: MBEDTLS_SSL_TRUNCATED_HMAC * Requires: MBEDTLS_SSL_TRUNCATED_HMAC
*/ */
//#define MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT // #define MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT
/** /**
* \def MBEDTLS_TEST_HOOKS * \def MBEDTLS_TEST_HOOKS
...@@ -1772,7 +1773,7 @@ ...@@ -1772,7 +1773,7 @@
* *
* Uncomment this to allow your own alternate threading implementation. * Uncomment this to allow your own alternate threading implementation.
*/ */
//#define MBEDTLS_THREADING_ALT // #define MBEDTLS_THREADING_ALT
/** /**
* \def MBEDTLS_THREADING_PTHREAD * \def MBEDTLS_THREADING_PTHREAD
...@@ -1783,7 +1784,7 @@ ...@@ -1783,7 +1784,7 @@
* *
* Uncomment this to enable pthread mutexes. * Uncomment this to enable pthread mutexes.
*/ */
//#define MBEDTLS_THREADING_PTHREAD // #define MBEDTLS_THREADING_PTHREAD
/** /**
* \def MBEDTLS_VERSION_FEATURES * \def MBEDTLS_VERSION_FEATURES
...@@ -1796,7 +1797,7 @@ ...@@ -1796,7 +1797,7 @@
* *
* Comment this to disable run-time checking and save ROM space * Comment this to disable run-time checking and save ROM space
*/ */
#define MBEDTLS_VERSION_FEATURES // #define MBEDTLS_VERSION_FEATURES
/** /**
* \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
...@@ -1806,7 +1807,7 @@ ...@@ -1806,7 +1807,7 @@
* *
* Uncomment to prevent an error. * Uncomment to prevent an error.
*/ */
//#define MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3 // #define MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
/** /**
* \def MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION * \def MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
...@@ -1818,7 +1819,7 @@ ...@@ -1818,7 +1819,7 @@
* *
* Uncomment to prevent an error. * Uncomment to prevent an error.
*/ */
//#define MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION // #define MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
/** /**
* \def MBEDTLS_X509_CHECK_KEY_USAGE * \def MBEDTLS_X509_CHECK_KEY_USAGE
...@@ -1832,7 +1833,7 @@ ...@@ -1832,7 +1833,7 @@
* *
* Comment to skip keyUsage checking for both CA and leaf certificates. * Comment to skip keyUsage checking for both CA and leaf certificates.
*/ */
#define MBEDTLS_X509_CHECK_KEY_USAGE // #define MBEDTLS_X509_CHECK_KEY_USAGE
/** /**
* \def MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE * \def MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
...@@ -1845,7 +1846,7 @@ ...@@ -1845,7 +1846,7 @@
* *
* Comment to skip extendedKeyUsage checking for certificates. * Comment to skip extendedKeyUsage checking for certificates.
*/ */
#define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE // #define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
/** /**
* \def MBEDTLS_X509_RSASSA_PSS_SUPPORT * \def MBEDTLS_X509_RSASSA_PSS_SUPPORT
...@@ -1855,7 +1856,7 @@ ...@@ -1855,7 +1856,7 @@
* *
* Comment this macro to disallow using RSASSA-PSS in certificates. * Comment this macro to disallow using RSASSA-PSS in certificates.
*/ */
#define MBEDTLS_X509_RSASSA_PSS_SUPPORT // #define MBEDTLS_X509_RSASSA_PSS_SUPPORT
/** /**
* \def MBEDTLS_ZLIB_SUPPORT * \def MBEDTLS_ZLIB_SUPPORT
...@@ -1880,7 +1881,7 @@ ...@@ -1880,7 +1881,7 @@
* *
* Uncomment to enable use of ZLIB * Uncomment to enable use of ZLIB
*/ */
//#define MBEDTLS_ZLIB_SUPPORT // #define MBEDTLS_ZLIB_SUPPORT
/* \} name SECTION: mbed TLS feature support */ /* \} name SECTION: mbed TLS feature support */
/** /**
...@@ -1902,7 +1903,7 @@ ...@@ -1902,7 +1903,7 @@
* *
* This modules adds support for the AES-NI instructions on x86-64 * This modules adds support for the AES-NI instructions on x86-64
*/ */
#define MBEDTLS_AESNI_C // #define MBEDTLS_AESNI_C
/** /**
* \def MBEDTLS_AES_C * \def MBEDTLS_AES_C
...@@ -2071,7 +2072,7 @@ ...@@ -2071,7 +2072,7 @@
* *
* Module: library/blowfish.c * Module: library/blowfish.c
*/ */
#define MBEDTLS_BLOWFISH_C // #define MBEDTLS_BLOWFISH_C
/** /**
* \def MBEDTLS_CAMELLIA_C * \def MBEDTLS_CAMELLIA_C
...@@ -2126,7 +2127,7 @@ ...@@ -2126,7 +2127,7 @@
* MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
* MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
*/ */
#define MBEDTLS_CAMELLIA_C // #define MBEDTLS_CAMELLIA_C
/** /**
* \def MBEDTLS_ARIA_C * \def MBEDTLS_ARIA_C
...@@ -2178,7 +2179,7 @@ ...@@ -2178,7 +2179,7 @@
* MBEDTLS_TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256 * MBEDTLS_TLS_ECDHE_PSK_WITH_ARIA_128_CBC_SHA256
* MBEDTLS_TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384 * MBEDTLS_TLS_ECDHE_PSK_WITH_ARIA_256_CBC_SHA384
*/ */
//#define MBEDTLS_ARIA_C // #define MBEDTLS_ARIA_C
/** /**
* \def MBEDTLS_CCM_C * \def MBEDTLS_CCM_C
...@@ -2192,7 +2193,7 @@ ...@@ -2192,7 +2193,7 @@
* This module enables the AES-CCM ciphersuites, if other requisites are * This module enables the AES-CCM ciphersuites, if other requisites are
* enabled as well. * enabled as well.
*/ */
#define MBEDTLS_CCM_C // #define MBEDTLS_CCM_C
/** /**
* \def MBEDTLS_CERTS_C * \def MBEDTLS_CERTS_C
...@@ -2204,7 +2205,7 @@ ...@@ -2204,7 +2205,7 @@
* *
* This module is used for testing (ssl_client/server). * This module is used for testing (ssl_client/server).
*/ */
#define MBEDTLS_CERTS_C // #define MBEDTLS_CERTS_C
/** /**
* \def MBEDTLS_CHACHA20_C * \def MBEDTLS_CHACHA20_C
...@@ -2249,7 +2250,7 @@ ...@@ -2249,7 +2250,7 @@
* Requires: MBEDTLS_AES_C or MBEDTLS_DES_C * Requires: MBEDTLS_AES_C or MBEDTLS_DES_C
* *
*/ */
//#define MBEDTLS_CMAC_C // #define MBEDTLS_CMAC_C
/** /**
* \def MBEDTLS_CTR_DRBG_C * \def MBEDTLS_CTR_DRBG_C
...@@ -2312,7 +2313,7 @@ ...@@ -2312,7 +2313,7 @@
* \warning DES is considered a weak cipher and its use constitutes a * \warning DES is considered a weak cipher and its use constitutes a
* security risk. We recommend considering stronger ciphers instead. * security risk. We recommend considering stronger ciphers instead.
*/ */
#define MBEDTLS_DES_C // #define MBEDTLS_DES_C
/** /**
* \def MBEDTLS_DHM_C * \def MBEDTLS_DHM_C
...@@ -2333,7 +2334,7 @@ ...@@ -2333,7 +2334,7 @@
* See dhm.h for more details. * See dhm.h for more details.
* *
*/ */
#define MBEDTLS_DHM_C // #define MBEDTLS_DHM_C
/** /**
* \def MBEDTLS_ECDH_C * \def MBEDTLS_ECDH_C
...@@ -2383,7 +2384,7 @@ ...@@ -2383,7 +2384,7 @@
* *
* Requires: MBEDTLS_ECP_C, MBEDTLS_MD_C * Requires: MBEDTLS_ECP_C, MBEDTLS_MD_C
*/ */
//#define MBEDTLS_ECJPAKE_C // #define MBEDTLS_ECJPAKE_C
/** /**
* \def MBEDTLS_ECP_C * \def MBEDTLS_ECP_C
...@@ -2423,7 +2424,7 @@ ...@@ -2423,7 +2424,7 @@
* *
* This module enables mbedtls_strerror(). * This module enables mbedtls_strerror().
*/ */
#define MBEDTLS_ERROR_C // #define MBEDTLS_ERROR_C
/** /**
* \def MBEDTLS_GCM_C * \def MBEDTLS_GCM_C
...@@ -2460,7 +2461,7 @@ ...@@ -2460,7 +2461,7 @@
* *
* Uncomment to enable the HAVEGE random generator. * Uncomment to enable the HAVEGE random generator.
*/ */
//#define MBEDTLS_HAVEGE_C // #define MBEDTLS_HAVEGE_C
/** /**
* \def MBEDTLS_HKDF_C * \def MBEDTLS_HKDF_C
...@@ -2489,7 +2490,7 @@ ...@@ -2489,7 +2490,7 @@
* *
* Uncomment to enable the HMAC_DRBG random number geerator. * Uncomment to enable the HMAC_DRBG random number geerator.
*/ */
#define MBEDTLS_HMAC_DRBG_C // #define MBEDTLS_HMAC_DRBG_C
/** /**
* \def MBEDTLS_NIST_KW_C * \def MBEDTLS_NIST_KW_C
...@@ -2502,7 +2503,7 @@ ...@@ -2502,7 +2503,7 @@
* *
* Requires: MBEDTLS_AES_C and MBEDTLS_CIPHER_C * Requires: MBEDTLS_AES_C and MBEDTLS_CIPHER_C
*/ */
//#define MBEDTLS_NIST_KW_C // #define MBEDTLS_NIST_KW_C
/** /**
* \def MBEDTLS_MD_C * \def MBEDTLS_MD_C
...@@ -2531,7 +2532,7 @@ ...@@ -2531,7 +2532,7 @@
* it, and considering stronger message digests instead. * it, and considering stronger message digests instead.
* *
*/ */
//#define MBEDTLS_MD2_C // #define MBEDTLS_MD2_C
/** /**
* \def MBEDTLS_MD4_C * \def MBEDTLS_MD4_C
...@@ -2548,7 +2549,7 @@ ...@@ -2548,7 +2549,7 @@
* it, and considering stronger message digests instead. * it, and considering stronger message digests instead.
* *
*/ */
//#define MBEDTLS_MD4_C // #define MBEDTLS_MD4_C
/** /**
* \def MBEDTLS_MD5_C * \def MBEDTLS_MD5_C
...@@ -2586,7 +2587,9 @@ ...@@ -2586,7 +2587,9 @@
* *
* Enable this module to enable the buffer memory allocator. * Enable this module to enable the buffer memory allocator.
*/ */
//#define MBEDTLS_MEMORY_BUFFER_ALLOC_C #ifdef HILINK_E2E_SECURITY_CONFIG
#define MBEDTLS_MEMORY_BUFFER_ALLOC_C
#endif
/** /**
* \def MBEDTLS_NET_C * \def MBEDTLS_NET_C
...@@ -2749,7 +2752,7 @@ ...@@ -2749,7 +2752,7 @@
* This module enables SSL/TLS PKCS #11 smartcard support. * This module enables SSL/TLS PKCS #11 smartcard support.
* Requires the presence of the PKCS#11 helper library (libpkcs11-helper) * Requires the presence of the PKCS#11 helper library (libpkcs11-helper)
*/ */
//#define MBEDTLS_PKCS11_C // #define MBEDTLS_PKCS11_C
/** /**
* \def MBEDTLS_PKCS12_C * \def MBEDTLS_PKCS12_C
...@@ -2765,7 +2768,7 @@ ...@@ -2765,7 +2768,7 @@
* *
* This module enables PKCS#12 functions. * This module enables PKCS#12 functions.
*/ */
#define MBEDTLS_PKCS12_C // #define MBEDTLS_PKCS12_C
/** /**
* \def MBEDTLS_PLATFORM_C * \def MBEDTLS_PLATFORM_C
...@@ -2806,7 +2809,7 @@ ...@@ -2806,7 +2809,7 @@
* Caller: library/md.c * Caller: library/md.c
* *
*/ */
#define MBEDTLS_RIPEMD160_C // #define MBEDTLS_RIPEMD160_C
/** /**
* \def MBEDTLS_RSA_C * \def MBEDTLS_RSA_C
...@@ -2941,7 +2944,7 @@ ...@@ -2941,7 +2944,7 @@
* *
* This module is required for SSL/TLS server support. * This module is required for SSL/TLS server support.
*/ */
#define MBEDTLS_SSL_SRV_C // #define MBEDTLS_SSL_SRV_C
/** /**
* \def MBEDTLS_SSL_TLS_C * \def MBEDTLS_SSL_TLS_C
...@@ -2979,7 +2982,7 @@ ...@@ -2979,7 +2982,7 @@
* *
* Enable this layer to allow use of mutexes within mbed TLS * Enable this layer to allow use of mutexes within mbed TLS
*/ */
//#define MBEDTLS_THREADING_C // #define MBEDTLS_THREADING_C
/** /**
* \def MBEDTLS_TIMING_C * \def MBEDTLS_TIMING_C
...@@ -3074,7 +3077,7 @@ ...@@ -3074,7 +3077,7 @@
* *
* This module is used for reading X.509 certificate request. * This module is used for reading X.509 certificate request.
*/ */
#define MBEDTLS_X509_CSR_PARSE_C // #define MBEDTLS_X509_CSR_PARSE_C
/** /**
* \def MBEDTLS_X509_CREATE_C * \def MBEDTLS_X509_CREATE_C
...@@ -3087,7 +3090,7 @@ ...@@ -3087,7 +3090,7 @@
* *
* This module is the basis for creating X.509 certificates and CSRs. * This module is the basis for creating X.509 certificates and CSRs.
*/ */
#define MBEDTLS_X509_CREATE_C // #define MBEDTLS_X509_CREATE_C
/** /**
* \def MBEDTLS_X509_CRT_WRITE_C * \def MBEDTLS_X509_CRT_WRITE_C
...@@ -3100,7 +3103,7 @@ ...@@ -3100,7 +3103,7 @@
* *
* This module is required for X.509 certificate creation. * This module is required for X.509 certificate creation.
*/ */
#define MBEDTLS_X509_CRT_WRITE_C // #define MBEDTLS_X509_CRT_WRITE_C
/** /**
* \def MBEDTLS_X509_CSR_WRITE_C * \def MBEDTLS_X509_CSR_WRITE_C
...@@ -3113,7 +3116,7 @@ ...@@ -3113,7 +3116,7 @@
* *
* This module is required for X.509 certificate request writing. * This module is required for X.509 certificate request writing.
*/ */
#define MBEDTLS_X509_CSR_WRITE_C // #define MBEDTLS_X509_CSR_WRITE_C
/** /**
* \def MBEDTLS_XTEA_C * \def MBEDTLS_XTEA_C
...@@ -3123,7 +3126,7 @@ ...@@ -3123,7 +3126,7 @@
* Module: library/xtea.c * Module: library/xtea.c
* Caller: * Caller:
*/ */
#define MBEDTLS_XTEA_C // #define MBEDTLS_XTEA_C
/* \} name SECTION: mbed TLS modules */ /* \} name SECTION: mbed TLS modules */
...@@ -3143,64 +3146,64 @@ ...@@ -3143,64 +3146,64 @@
*/ */
/* MPI / BIGNUM options */ /* MPI / BIGNUM options */
//#define MBEDTLS_MPI_WINDOW_SIZE 6 /**< Maximum window size used. */ // #define MBEDTLS_MPI_WINDOW_SIZE 6 /**< Maximum windows size used. */
//#define MBEDTLS_MPI_MAX_SIZE 1024 /**< Maximum number of bytes for usable MPIs. */ // #define MBEDTLS_MPI_MAX_SIZE 1024 /**< Maximum number of bytes for usable MPIs. */
/* CTR_DRBG options */ /* CTR_DRBG options */
//#define MBEDTLS_CTR_DRBG_ENTROPY_LEN 48 /**< Amount of entropy used per seed by default (48 with SHA-512, 32 with SHA-256) */ // #define MBEDTLS_CTR_DRBG_ENTROPY_LEN 48 /**< Amount of entropy used per seed by default (48 with SHA-512, 32 with SHA-256) */
//#define MBEDTLS_CTR_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */ // #define MBEDTLS_CTR_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */
//#define MBEDTLS_CTR_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */ // #define MBEDTLS_CTR_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */
//#define MBEDTLS_CTR_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */ // #define MBEDTLS_CTR_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */
//#define MBEDTLS_CTR_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */ // #define MBEDTLS_CTR_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */
/* HMAC_DRBG options */ /* HMAC_DRBG options */
//#define MBEDTLS_HMAC_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */ // #define MBEDTLS_HMAC_DRBG_RESEED_INTERVAL 10000 /**< Interval before reseed is performed by default */
//#define MBEDTLS_HMAC_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */ // #define MBEDTLS_HMAC_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */
//#define MBEDTLS_HMAC_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */ // #define MBEDTLS_HMAC_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */
//#define MBEDTLS_HMAC_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */ // #define MBEDTLS_HMAC_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */
/* ECP options */ /* ECP options */
//#define MBEDTLS_ECP_MAX_BITS 521 /**< Maximum bit size of groups */ // #define MBEDTLS_ECP_MAX_BITS 521 /**< Maximum bit size of groups */
//#define MBEDTLS_ECP_WINDOW_SIZE 6 /**< Maximum window size used */ // #define MBEDTLS_ECP_WINDOW_SIZE 6 /**< Maximum window size used */
//#define MBEDTLS_ECP_FIXED_POINT_OPTIM 1 /**< Enable fixed-point speed-up */ // #define MBEDTLS_ECP_FIXED_POINT_OPTIM 1 /**< Enable fixed-point speed-up */
/* Entropy options */ /* Entropy options */
//#define MBEDTLS_ENTROPY_MAX_SOURCES 20 /**< Maximum number of sources supported */ // #define MBEDTLS_ENTROPY_MAX_SOURCES 20 /**< Maximum number of sources supported */
//#define MBEDTLS_ENTROPY_MAX_GATHER 128 /**< Maximum amount requested from entropy sources */ // #define MBEDTLS_ENTROPY_MAX_GATHER 128 /**< Maximum amount requested from entropy sources */
//#define MBEDTLS_ENTROPY_MIN_HARDWARE 32 /**< Default minimum number of bytes required for the hardware entropy source mbedtls_hardware_poll() before entropy is released */ // #define MBEDTLS_ENTROPY_MIN_HARDWARE 32 /**< Default minimum number of bytes required for the hardware entropy source mbedtls_hardware_poll() before entropy is released */
/* Memory buffer allocator options */ /* Memory buffer allocator options */
//#define MBEDTLS_MEMORY_ALIGN_MULTIPLE 4 /**< Align on multiples of this value */ // #define MBEDTLS_MEMORY_ALIGN_MULTIPLE 4 /**< Align on multiples of this value */
/* Platform options */ /* Platform options */
//#define MBEDTLS_PLATFORM_STD_MEM_HDR <stdlib.h> /**< Header to include if MBEDTLS_PLATFORM_NO_STD_FUNCTIONS is defined. Don't define if no header is needed. */ // #define MBEDTLS_PLATFORM_STD_MEM_HDR <stdlib.h> /**< Header to include if MBEDTLS_PLATFORM_NO_STD_FUNCTIONS is defined. Don't define if no header is needed. */
//#define MBEDTLS_PLATFORM_STD_CALLOC calloc /**< Default allocator to use, can be undefined */ #define MBEDTLS_PLATFORM_STD_CALLOC calloc /**< Default allocator to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_FREE free /**< Default free to use, can be undefined */ #define MBEDTLS_PLATFORM_STD_FREE free /**< Default free to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_EXIT exit /**< Default exit to use, can be undefined */ // #define MBEDTLS_PLATFORM_STD_EXIT exit /**< Default exit to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_TIME time /**< Default time to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */ // #define MBEDTLS_PLATFORM_STD_TIME time /**< Default time to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
//#define MBEDTLS_PLATFORM_STD_FPRINTF fprintf /**< Default fprintf to use, can be undefined */ // #define MBEDTLS_PLATFORM_STD_FPRINTF fprintf /**< Default fprintf to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_PRINTF printf /**< Default printf to use, can be undefined */ // #define MBEDTLS_PLATFORM_STD_PRINTF printf /**< Default printf to use, can be undefined */
/* Note: your snprintf must correctly zero-terminate the buffer! */ /* Note: your snprintf must correctly zero-terminate the buffer! */
//#define MBEDTLS_PLATFORM_STD_SNPRINTF snprintf /**< Default snprintf to use, can be undefined */ #define MBEDTLS_PLATFORM_STD_SNPRINTF snprintf /**< Default snprintf to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_EXIT_SUCCESS 0 /**< Default exit value to use, can be undefined */ // #define MBEDTLS_PLATFORM_STD_EXIT_SUCCESS 0 /**< Default exit value to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_EXIT_FAILURE 1 /**< Default exit value to use, can be undefined */ // #define MBEDTLS_PLATFORM_STD_EXIT_FAILURE 1 /**< Default exit value to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_NV_SEED_READ mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */ // #define MBEDTLS_PLATFORM_STD_NV_SEED_READ mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_NV_SEED_WRITE mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */ // #define MBEDTLS_PLATFORM_STD_NV_SEED_WRITE mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */
//#define MBEDTLS_PLATFORM_STD_NV_SEED_FILE "seedfile" /**< Seed file to read/write with default implementation */ // #define MBEDTLS_PLATFORM_STD_NV_SEED_FILE "seedfile" /**< Seed file to read/write with default implementation */
/* To Use Function Macros MBEDTLS_PLATFORM_C must be enabled */ /* To Use Function Macros MBEDTLS_PLATFORM_C must be enabled */
/* MBEDTLS_PLATFORM_XXX_MACRO and MBEDTLS_PLATFORM_XXX_ALT cannot both be defined */ /* MBEDTLS_PLATFORM_XXX_MACRO and MBEDTLS_PLATFORM_XXX_ALT cannot both be defined */
//#define MBEDTLS_PLATFORM_CALLOC_MACRO calloc /**< Default allocator macro to use, can be undefined */ // #define MBEDTLS_PLATFORM_CALLOC_MACRO calloc /**< Default allocator macro to use, can be undefined */
//#define MBEDTLS_PLATFORM_FREE_MACRO free /**< Default free macro to use, can be undefined */ // #define MBEDTLS_PLATFORM_FREE_MACRO free /**< Default free macro to use, can be undefined */
//#define MBEDTLS_PLATFORM_EXIT_MACRO exit /**< Default exit macro to use, can be undefined */ // #define MBEDTLS_PLATFORM_EXIT_MACRO exit /**< Default exit macro to use, can be undefined */
//#define MBEDTLS_PLATFORM_TIME_MACRO time /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */ // #define MBEDTLS_PLATFORM_TIME_MACRO time /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
//#define MBEDTLS_PLATFORM_TIME_TYPE_MACRO time_t /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */ // #define MBEDTLS_PLATFORM_TIME_TYPE_MACRO time_t /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
//#define MBEDTLS_PLATFORM_FPRINTF_MACRO fprintf /**< Default fprintf macro to use, can be undefined */ // #define MBEDTLS_PLATFORM_FPRINTF_MACRO fprintf /**< Default fprintf macro to use, can be undefined */
//#define MBEDTLS_PLATFORM_PRINTF_MACRO printf /**< Default printf macro to use, can be undefined */ // #define MBEDTLS_PLATFORM_PRINTF_MACRO printf /**< Default printf macro to use, can be undefined */
/* Note: your snprintf must correctly zero-terminate the buffer! */ /* Note: your snprintf must correctly zero-terminate the buffer! */
//#define MBEDTLS_PLATFORM_SNPRINTF_MACRO snprintf /**< Default snprintf macro to use, can be undefined */ // #define MBEDTLS_PLATFORM_SNPRINTF_MACRO snprintf /**< Default snprintf macro to use, can be undefined */
//#define MBEDTLS_PLATFORM_NV_SEED_READ_MACRO mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */ // #define MBEDTLS_PLATFORM_NV_SEED_READ_MACRO mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */
//#define MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */ // #define MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */
/** /**
* \brief This macro is invoked by the library when an invalid parameter * \brief This macro is invoked by the library when an invalid parameter
...@@ -3236,11 +3239,11 @@ ...@@ -3236,11 +3239,11 @@
* *
* \param cond The expression that should evaluate to true, but doesn't. * \param cond The expression that should evaluate to true, but doesn't.
*/ */
//#define MBEDTLS_PARAM_FAILED( cond ) assert( cond ) // #define MBEDTLS_PARAM_FAILED( cond ) assert( cond )
/* SSL Cache options */ /* SSL Cache options */
//#define MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT 86400 /**< 1 day */ // #define MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT 86400 /**< 1 day */
//#define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /**< Maximum entries in cache */ // #define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /**< Maximum entries in cache */
/* SSL options */ /* SSL options */
...@@ -3268,7 +3271,7 @@ ...@@ -3268,7 +3271,7 @@
* Uncomment to set the maximum plaintext size of both * Uncomment to set the maximum plaintext size of both
* incoming and outgoing I/O buffers. * incoming and outgoing I/O buffers.
*/ */
//#define MBEDTLS_SSL_MAX_CONTENT_LEN 16384 #define MBEDTLS_SSL_MAX_CONTENT_LEN 16384
/** \def MBEDTLS_SSL_IN_CONTENT_LEN /** \def MBEDTLS_SSL_IN_CONTENT_LEN
* *
...@@ -3293,7 +3296,7 @@ ...@@ -3293,7 +3296,7 @@
* Uncomment to set the maximum plaintext size of the incoming I/O buffer * Uncomment to set the maximum plaintext size of the incoming I/O buffer
* independently of the outgoing I/O buffer. * independently of the outgoing I/O buffer.
*/ */
//#define MBEDTLS_SSL_IN_CONTENT_LEN 16384 #define MBEDTLS_SSL_IN_CONTENT_LEN 16384
/** \def MBEDTLS_SSL_OUT_CONTENT_LEN /** \def MBEDTLS_SSL_OUT_CONTENT_LEN
* *
...@@ -3317,7 +3320,7 @@ ...@@ -3317,7 +3320,7 @@
* Uncomment to set the maximum plaintext size of the outgoing I/O buffer * Uncomment to set the maximum plaintext size of the outgoing I/O buffer
* independently of the incoming I/O buffer. * independently of the incoming I/O buffer.
*/ */
//#define MBEDTLS_SSL_OUT_CONTENT_LEN 16384 #define MBEDTLS_SSL_OUT_CONTENT_LEN 16384
/** \def MBEDTLS_SSL_DTLS_MAX_BUFFERING /** \def MBEDTLS_SSL_DTLS_MAX_BUFFERING
* *
...@@ -3334,11 +3337,11 @@ ...@@ -3334,11 +3337,11 @@
* while buffering multiple smaller handshake messages. * while buffering multiple smaller handshake messages.
* *
*/ */
//#define MBEDTLS_SSL_DTLS_MAX_BUFFERING 32768 // #define MBEDTLS_SSL_DTLS_MAX_BUFFERING 32768
//#define MBEDTLS_SSL_DEFAULT_TICKET_LIFETIME 86400 /**< Lifetime of session tickets (if enabled) */ // #define MBEDTLS_SSL_DEFAULT_TICKET_LIFETIME 86400 /**< Lifetime of session tickets (if enabled) */
//#define MBEDTLS_PSK_MAX_LEN 32 /**< Max size of TLS pre-shared keys, in bytes (default 256 bits) */ // #define MBEDTLS_PSK_MAX_LEN 32 /**< Max size of TLS pre-shared keys, in bytes (default 256 bits) */
//#define MBEDTLS_SSL_COOKIE_TIMEOUT 60 /**< Default expiration delay of DTLS cookies, in seconds if HAVE_TIME, or in number of cookies issued */ // #define MBEDTLS_SSL_COOKIE_TIMEOUT 60 /**< Default expiration delay of DTLS cookies, in seconds if HAVE_TIME, or in number of cookies issued */
/** /**
* Complete list of ciphersuites to use, in order of preference. * Complete list of ciphersuites to use, in order of preference.
...@@ -3352,11 +3355,11 @@ ...@@ -3352,11 +3355,11 @@
* *
* The value below is only an example, not the default. * The value below is only an example, not the default.
*/ */
//#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 // #define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
/* X509 options */ /* X509 options */
//#define MBEDTLS_X509_MAX_INTERMEDIATE_CA 8 /**< Maximum number of intermediate CAs in a verification chain. */ // #define MBEDTLS_X509_MAX_INTERMEDIATE_CA 8 /**< Maximum number of intermediate CAs in a verification chain. */
//#define MBEDTLS_X509_MAX_FILE_PATH_LEN 512 /**< Maximum length of a path/filename string in bytes including the null terminator character ('\0'). */ // #define MBEDTLS_X509_MAX_FILE_PATH_LEN 512 /**< Maximum length of a path/filename string in bytes including the null terminator character ('\0'). */
/** /**
* Allow SHA-1 in the default TLS configuration for certificate signing. * Allow SHA-1 in the default TLS configuration for certificate signing.
...@@ -3370,7 +3373,7 @@ ...@@ -3370,7 +3373,7 @@
* on it, and considering stronger message digests instead. * on it, and considering stronger message digests instead.
* *
*/ */
// #define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES #define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
/** /**
* Allow SHA-1 in the default TLS configuration for TLS 1.2 handshake * Allow SHA-1 in the default TLS configuration for TLS 1.2 handshake
...@@ -3407,7 +3410,7 @@ ...@@ -3407,7 +3410,7 @@
* C standards (e.g using memset_s() in C11) or calling a secure memset() from * C standards (e.g using memset_s() in C11) or calling a secure memset() from
* their system (e.g explicit_bzero() in BSD). * their system (e.g explicit_bzero() in BSD).
*/ */
//#define MBEDTLS_PLATFORM_ZEROIZE_ALT // #define MBEDTLS_PLATFORM_ZEROIZE_ALT
/** /**
* Uncomment the macro to let Mbed TLS use your alternate implementation of * Uncomment the macro to let Mbed TLS use your alternate implementation of
...@@ -3426,7 +3429,7 @@ ...@@ -3426,7 +3429,7 @@
* unconditionally use the implementation for mbedtls_platform_gmtime_r() * unconditionally use the implementation for mbedtls_platform_gmtime_r()
* supplied at compile time. * supplied at compile time.
*/ */
//#define MBEDTLS_PLATFORM_GMTIME_R_ALT // #define MBEDTLS_PLATFORM_GMTIME_R_ALT
/* \} name SECTION: Customisation configuration options */ /* \} name SECTION: Customisation configuration options */
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册