14f2309b6f
This is intended (but not entirely verified) to match our esp32 builds. It does fix accessing https://circuitpython.org, which failed before with "MBEDTLS_ERR_SSL_FATAL_ALERT_MESSAGE". It still doesn't work on a personal website of mine with valid letsencrypt certificate but I haven't verified whether it works on esp32s2 with CP. That site only allows TLS 1.3, while this mbedtls only supports up to 1.2. The version of mbedtls we adopted based on micropython's use has no TLS 1.3 support, but the one in espressif esp-idf does.
127 lines
4.4 KiB
C
127 lines
4.4 KiB
C
/*
|
|
* This file is part of the MicroPython project, http://micropython.org/
|
|
*
|
|
* The MIT License (MIT)
|
|
*
|
|
* Copyright (c) 2018-2019 Damien P. George
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
* in the Software without restriction, including without limitation the rights
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
* furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in
|
|
* all copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
* THE SOFTWARE.
|
|
*/
|
|
#ifndef MICROPY_INCLUDED_MBEDTLS_CONFIG_H
|
|
#define MICROPY_INCLUDED_MBEDTLS_CONFIG_H
|
|
|
|
// If you want to debug MBEDTLS uncomment the following and
|
|
// Pass 3 to mbedtls_debug_set_threshold in socket_new
|
|
// #define MBEDTLS_DEBUG_C
|
|
|
|
// Set mbedtls configuration
|
|
#define MBEDTLS_PLATFORM_MEMORY
|
|
#define MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
|
|
#define MBEDTLS_DEPRECATED_REMOVED
|
|
#define MBEDTLS_ENTROPY_HARDWARE_ALT
|
|
#define MBEDTLS_AES_ROM_TABLES
|
|
#define MBEDTLS_CIPHER_MODE_CBC
|
|
#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
|
|
#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
|
|
#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
|
|
#define MBEDTLS_ECP_DP_BP256R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_BP384R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_BP512R1_ENABLED
|
|
#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
|
|
#define MBEDTLS_ECP_NIST_OPTIM
|
|
#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
|
|
#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
|
|
#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
|
|
#define MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
|
|
#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
|
|
#define MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
|
|
#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
|
|
#define MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
|
|
#define MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
|
|
#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
|
|
#define MBEDTLS_NO_PLATFORM_ENTROPY
|
|
#define MBEDTLS_PKCS1_V15
|
|
#define MBEDTLS_SHA256_SMALLER
|
|
#define MBEDTLS_SSL_PROTO_TLS1
|
|
#define MBEDTLS_SSL_PROTO_TLS1_1
|
|
#define MBEDTLS_SSL_PROTO_TLS1_2
|
|
#define MBEDTLS_SSL_SERVER_NAME_INDICATION
|
|
|
|
// Use a smaller output buffer to reduce size of SSL context
|
|
#define MBEDTLS_SSL_MAX_CONTENT_LEN (16384)
|
|
#define MBEDTLS_SSL_IN_CONTENT_LEN (MBEDTLS_SSL_MAX_CONTENT_LEN)
|
|
#define MBEDTLS_SSL_OUT_CONTENT_LEN (4096)
|
|
|
|
// Enable mbedtls modules
|
|
#define MBEDTLS_AES_C
|
|
#define MBEDTLS_ASN1_PARSE_C
|
|
#define MBEDTLS_ASN1_WRITE_C
|
|
#define MBEDTLS_BIGNUM_C
|
|
#define MBEDTLS_CIPHER_C
|
|
#define MBEDTLS_CTR_DRBG_C
|
|
#define MBEDTLS_ECDH_C
|
|
#define MBEDTLS_ECDSA_C
|
|
#define MBEDTLS_ECP_C
|
|
#define MBEDTLS_ENTROPY_C
|
|
#define MBEDTLS_ERROR_C
|
|
#define MBEDTLS_GCM_C
|
|
#define MBEDTLS_MD_C
|
|
#define MBEDTLS_MD5_C
|
|
#define MBEDTLS_OID_C
|
|
#define MBEDTLS_PKCS5_C
|
|
#define MBEDTLS_PK_C
|
|
#define MBEDTLS_PK_PARSE_C
|
|
#define MBEDTLS_PLATFORM_C
|
|
#define MBEDTLS_RSA_C
|
|
#define MBEDTLS_SHA1_C
|
|
#define MBEDTLS_SHA256_C
|
|
#define MBEDTLS_SHA512_C
|
|
#define MBEDTLS_SSL_CLI_C
|
|
#define MBEDTLS_SSL_SRV_C
|
|
#define MBEDTLS_SSL_TLS_C
|
|
#define MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_KEY_EXCHANGE
|
|
#define MBEDTLS_X509_CRT_PARSE_C
|
|
#define MBEDTLS_X509_USE_C
|
|
#define MBEDTLS_HAVE_TIME
|
|
#define MBEDTLS_DHM_C // needed by DHE_PSK
|
|
#undef MBEDTLS_HAVE_TIME_DATE
|
|
|
|
// Memory allocation hooks
|
|
#include <stdlib.h>
|
|
#include <stdio.h>
|
|
void *m_tracked_calloc(size_t nmemb, size_t size);
|
|
void m_tracked_free(void *ptr);
|
|
#define MBEDTLS_PLATFORM_STD_CALLOC m_tracked_calloc
|
|
#define MBEDTLS_PLATFORM_STD_FREE m_tracked_free
|
|
#define MBEDTLS_PLATFORM_SNPRINTF_MACRO snprintf
|
|
|
|
// Time hook
|
|
#include <time.h>
|
|
time_t rp2_rtctime_seconds(time_t *timer);
|
|
#define MBEDTLS_PLATFORM_TIME_MACRO rp2_rtctime_seconds
|
|
|
|
#include "mbedtls/check_config.h"
|
|
|
|
#endif /* MICROPY_INCLUDED_MBEDTLS_CONFIG_H */
|