mirror of
https://github.com/zephyrproject-rtos/zephyr
synced 2025-09-01 03:05:47 +00:00
Introducing MBEDTLS_PROMPTLESS and CUSTOM_MBEDTLS_CFG_FILE settings. The MBEDTLS_PROMPTLESS can be set to true whenever configuration of mbedTLS is done from a subsystem or module. Such an example is OpenThread, which selects mbedTLS for some predefined crypto settings using OPENTHREAD_MBEDTLS=y. Unfortunately, extensive use of select can easily cause stuck symbol syndrome making it harder than neccesarry for users to later reconfigure as they easily get stuck in incompatible configurations. Providing a MBEDTLS_PROMPTLESS allows such configurations to disable the MBEDTLS prompt itself when selected but avoid stuck symbol if user select another security configuration. Similar with CUSTOM_MBEDTLS_CFG_FILE which ensures that user must explicitly select this symbol before providing a custom mbedTLS config file. Today, other parts the Kconfig tree may set a default value for MBEDTLS_CFG_FILE but that value is stuck and thus changed Kconfig selections elsewhere in the tree will not adjust the value. Introducing CUSTOM_MBEDTLS_CFG_FILE ensures it is known when the user has provided the value. Signed-off-by: Torsten Rasmussen <Torsten.Rasmussen@nordicsemi.no> Signed-off-by: Ioannis Glaropoulos <Ioannis.Glaropoulos@nordicsemi.no>
15 lines
366 B
Plaintext
15 lines
366 B
Plaintext
CONFIG_LOG=y
|
|
CONFIG_LOG_MODE_MINIMAL=y
|
|
CONFIG_MBEDTLS=y
|
|
CONFIG_MBEDTLS_BUILTIN=y
|
|
CONFIG_MBEDTLS_CFG_FILE="config-tls-generic.h"
|
|
CONFIG_CUSTOM_MBEDTLS_CFG_FILE=y
|
|
CONFIG_MBEDTLS_HEAP_SIZE=512
|
|
CONFIG_MBEDTLS_CIPHER_CCM_ENABLED=y
|
|
CONFIG_MBEDTLS_CIPHER_GCM_ENABLED=y
|
|
CONFIG_MAIN_STACK_SIZE=4096
|
|
|
|
CONFIG_CRYPTO=y
|
|
CONFIG_CRYPTO_MBEDTLS_SHIM=y
|
|
CONFIG_CRYPTO_LOG_LEVEL_DBG=y
|