commit 2c69fa245c42acf7e7ab226c36a804f86275a723
author Gilles Peskine <Gilles.Peskine@arm.com> Wed Jun 02 00:33:33 2021 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Thu Jun 17 21:46:14 2021 +0200
tree c7a4af23c4c66702380a5a5c6ce824f0588d05f5
parent 3758fd6b79914d060124b5492da85a5693672bb5

Initializer element was not constant

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

library/x509_crt.c

diff --git a/library/x509_crt.c b/library/x509_crt.c
index abd70e1..6500445 100644
--- a/library/x509_crt.c
+++ b/library/x509_crt.c
@@ -124,7 +124,26 @@
 /* Next-generation profile. Currently identical to the default, but may
  * be tightened at any time. */
 const mbedtls_x509_crt_profile mbedtls_x509_crt_profile_next =
-    mbedtls_x509_crt_profile_default;
+{
+    /* Hashes from SHA-256 and above. */
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA256 ) |
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA384 ) |
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_MD_SHA512 ),
+    0xFFFFFFF, /* Any PK alg    */
+#if defined(MBEDTLS_ECP_C)
+    /* Curves at or above 128-bit security level. */
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_ECP_DP_SECP256R1 ) |
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_ECP_DP_SECP384R1 ) |
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_ECP_DP_SECP521R1 ) |
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_ECP_DP_BP256R1 ) |
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_ECP_DP_BP384R1 ) |
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_ECP_DP_BP512R1 ) |
+    MBEDTLS_X509_ID_FLAG( MBEDTLS_ECP_DP_SECP256K1 ),
+#else
+    0,
+#endif
+    2048,
+};
 
 /*
  * NSA Suite B Profile