mbedtls/configs
Gilles Peskine 33c92f01a0 Determine MBEDTLS_ECP_MAX_BITS automatically
MBEDTLS_ECP_MAX_BITS is now determined automatically from the configured
curves and no longer needs to be configured explicitly to save RAM. Setting
it explicit in config.h is still supported for backward compatibility.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-06-11 21:44:58 +02:00
..
config-ccm-psk-tls1_2.h Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
config-mini-tls1_1.h Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
config-no-entropy.h Update copyright notices to use Linux Foundation guidance 2020-08-19 10:35:41 +02:00
config-suite-b.h Determine MBEDTLS_ECP_MAX_BITS automatically 2021-06-11 21:44:58 +02:00
config-symmetric-only.h Update symmetric only reference config to include config_psa.h 2020-11-10 06:11:41 -08:00
config-thread.h Determine MBEDTLS_ECP_MAX_BITS automatically 2021-06-11 21:44:58 +02:00
README.txt Revert "config: Remove TLS and NET options" 2020-03-19 13:55:04 +01:00

This directory contains example configuration files.

The examples are generally focused on a particular usage case (eg, support for
a restricted number of ciphersuites) and aim at minimizing resource usage for
this target. They can be used as a basis for custom configurations.

These files are complete replacements for the default config.h. To use one of
them, you can pick one of the following methods:

1. Replace the default file include/mbedtls/config.h with the chosen one.
   (Depending on your compiler, you may need to adjust the line with
   #include "mbedtls/check_config.h" then.)

2. Define MBEDTLS_CONFIG_FILE and adjust the include path accordingly.
   For example, using make:

    CFLAGS="-I$PWD/configs -DMBEDTLS_CONFIG_FILE='<foo.h>'" make

   Or, using cmake:

    find . -iname '*cmake*' -not -name CMakeLists.txt -exec rm -rf {} +
    CFLAGS="-I$PWD/configs -DMBEDTLS_CONFIG_FILE='<foo.h>'" cmake .
    make

Note that the second method also works if you want to keep your custom
configuration file outside the mbed TLS tree.