mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2024-11-30 05:14:15 +01:00
c1096e7514
This commit introduces the option MBEDTLS_SSL_CONF_SINGLE_EC which can be used to register a single supported elliptic curve at compile time. It replaces the runtime configuration API mbedtls_ssl_conf_curves() which allows to register a _list_ of supported elliptic curves. In contrast to other options used to hardcode configuration options, MBEDTLS_SSL_CONF_SINGLE_EC isn't a numeric option, but instead it's only relevant if it's defined or not. To actually set the single elliptic curve that should be supported, numeric options MBEDTLS_SSL_CONF_SINGLE_EC_TLS_ID MBEDTLS_SSL_CONF_SINGLE_EC_GRP_ID must both be defined and provide the TLS ID and the Mbed TLS internal ID and the chosen curve, respectively. |
||
|---|---|---|
| .. | ||
| baremetal_test.h | ||
| baremetal.h | ||
| config-ccm-psk-tls1_2.h | ||
| config-mini-tls1_1.h | ||
| config-no-entropy.h | ||
| config-suite-b.h | ||
| config-thread.h | ||
| README.txt | ||
This directory contains example configuration files.
The examples are generally focused on a particular usage case (eg, support for
a restricted number of ciphersuites) and aim at minimizing resource usage for
this target. They can be used as a basis for custom configurations.
These files are complete replacements for the default config.h. To use one of
them, you can pick one of the following methods:
1. Replace the default file include/mbedtls/config.h with the chosen one.
(Depending on your compiler, you may need to adjust the line with
#include "mbedtls/check_config.h" then.)
2. Define MBEDTLS_CONFIG_FILE and adjust the include path accordingly.
For example, using make:
CFLAGS="-I$PWD/configs -DMBEDTLS_CONFIG_FILE='<foo.h>'" make
Or, using cmake:
find . -iname '*cmake*' -not -name CMakeLists.txt -exec rm -rf {} +
CFLAGS="-I$PWD/configs -DMBEDTLS_CONFIG_FILE='<foo.h>'" cmake .
make
Note that the second method also works if you want to keep your custom
configuration file outside the mbed TLS tree.