blob: 20a137ae5b487d283226f32c2da8d07358d9fb9d [file] [log] [blame]
Darryl Greena40a1012018-01-05 15:33:17 +00001/**
2 * \file config-mini-tls1_1.h
Manuel Pégourié-Gonnard8119dad2015-08-06 10:59:26 +02003 *
Darryl Greena40a1012018-01-05 15:33:17 +00004 * \brief Minimal configuration for TLS 1.1 (RFC 4346)
5 */
6/*
Bence Szépkúti1e148272020-08-07 13:07:28 +02007 * Copyright The Mbed TLS Contributors
Dave Rodgman7ff79652023-11-03 12:04:52 +00008 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
Manuel Pégourié-Gonnard8119dad2015-08-06 10:59:26 +02009 */
10/*
Manuel Pégourié-Gonnard684e9dc2013-09-20 15:11:44 +020011 * Minimal configuration for TLS 1.1 (RFC 4346), implementing only the
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020012 * required ciphersuite: MBEDTLS_TLS_RSA_WITH_3DES_EDE_CBC_SHA
Manuel Pégourié-Gonnard684e9dc2013-09-20 15:11:44 +020013 *
Manuel Pégourié-Gonnard0bc1f232014-04-30 11:53:50 +020014 * See README.txt for usage instructions.
Manuel Pégourié-Gonnard684e9dc2013-09-20 15:11:44 +020015 */
16
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020017#ifndef MBEDTLS_CONFIG_H
18#define MBEDTLS_CONFIG_H
Manuel Pégourié-Gonnard0bc1f232014-04-30 11:53:50 +020019
20/* System support */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020021#define MBEDTLS_HAVE_ASM
22#define MBEDTLS_HAVE_TIME
Manuel Pégourié-Gonnard0bc1f232014-04-30 11:53:50 +020023
Gilles Peskinef08ca832023-09-12 19:21:54 +020024/* Mbed TLS feature support */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025#define MBEDTLS_CIPHER_MODE_CBC
26#define MBEDTLS_PKCS1_V15
27#define MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
28#define MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard684e9dc2013-09-20 15:11:44 +020029
Gilles Peskinef08ca832023-09-12 19:21:54 +020030/* Mbed TLS modules */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020031#define MBEDTLS_AES_C
32#define MBEDTLS_ASN1_PARSE_C
33#define MBEDTLS_ASN1_WRITE_C
34#define MBEDTLS_BIGNUM_C
35#define MBEDTLS_CIPHER_C
36#define MBEDTLS_CTR_DRBG_C
37#define MBEDTLS_DES_C
38#define MBEDTLS_ENTROPY_C
39#define MBEDTLS_MD_C
40#define MBEDTLS_MD5_C
41#define MBEDTLS_NET_C
42#define MBEDTLS_OID_C
43#define MBEDTLS_PK_C
44#define MBEDTLS_PK_PARSE_C
45#define MBEDTLS_RSA_C
46#define MBEDTLS_SHA1_C
47#define MBEDTLS_SHA256_C
48#define MBEDTLS_SSL_CLI_C
49#define MBEDTLS_SSL_SRV_C
50#define MBEDTLS_SSL_TLS_C
51#define MBEDTLS_X509_CRT_PARSE_C
52#define MBEDTLS_X509_USE_C
Manuel Pégourié-Gonnard684e9dc2013-09-20 15:11:44 +020053
54/* For test certificates */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020055#define MBEDTLS_BASE64_C
56#define MBEDTLS_CERTS_C
57#define MBEDTLS_PEM_PARSE_C
Manuel Pégourié-Gonnard684e9dc2013-09-20 15:11:44 +020058
59/* For testing with compat.sh */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020060#define MBEDTLS_FS_IO
Manuel Pégourié-Gonnard684e9dc2013-09-20 15:11:44 +020061
Andrzej Kurek19d6ab02022-01-27 11:01:24 -050062/* These defines are present so that the config modifying scripts can enable
63 * them during tests/scripts/test-ref-configs.pl */
64//#define MBEDTLS_USE_PSA_CRYPTO
65//#define MBEDTLS_PSA_CRYPTO_C
66
Andrzej Kurek699290d2022-01-28 09:01:11 -050067/* With MBEDTLS_PSA_CRYPTO_C, importing an RSA key requires MBEDTLS_PK_WRITE_C */
68#if defined(MBEDTLS_PSA_CRYPTO_C)
69#define MBEDTLS_PK_WRITE_C
70#endif
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000071#include "mbedtls/check_config.h"
Manuel Pégourié-Gonnard14d55952014-04-30 12:35:08 +020072
Gilles Peskinedcb13af2022-02-25 21:00:16 +010073/* Error messages and TLS debugging traces
74 * (huge code size increase, needed for tests/ssl-opt.sh) */
75//#define MBEDTLS_DEBUG_C
76//#define MBEDTLS_ERROR_C
77
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020078#endif /* MBEDTLS_CONFIG_H */