commit 91fa5bade32dfd704101743fc120f6b38d610d64
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Tue May 28 12:28:17 2019 +0200
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Tue Jun 18 10:09:27 2019 +0200
tree e8130eda2de9d083aa3900d1784607a9199fca67
parent c725e4b34e5cd0cdc6f0e420cebc5294a8793899

Add new config MBEDTLS_SSL_CONTEXT_SERIALIZATION

This is enabled by default as we generally enable things by default unless
there's a reason not to (experimental, deprecated, security risk).

We need a compile-time option because, even though the functions themselves
can be easily garbage-collected by the linker, implementing them will require
saving 64 bytes of Client/ServerHello.random values after the handshake, that
would otherwise not be needed, and people who don't need this feature
shouldn't have to pay the price of increased RAM usage.

library/version_features.c

diff --git a/library/version_features.c b/library/version_features.c
index fc0b1f8..1bfc3d2 100644
--- a/library/version_features.c
+++ b/library/version_features.c
@@ -441,6 +441,9 @@
 #if defined(MBEDTLS_SSL_ASYNC_PRIVATE)
     "MBEDTLS_SSL_ASYNC_PRIVATE",
 #endif /* MBEDTLS_SSL_ASYNC_PRIVATE */
+#if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION)
+    "MBEDTLS_SSL_CONTEXT_SERIALIZATION",
+#endif /* MBEDTLS_SSL_CONTEXT_SERIALIZATION */
 #if defined(MBEDTLS_SSL_DEBUG_ALL)
     "MBEDTLS_SSL_DEBUG_ALL",
 #endif /* MBEDTLS_SSL_DEBUG_ALL */