alex/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2025-09-10 17:01:07 +00:00
Code Issues Packages Projects Releases Wiki Activity

components/mbedtls: MBEDTLS Handshake result check

Browse Source 
modify esp_config.h add some feature for support http2.0 protocol, TLS Handshake OK.
This commit is contained in:
liuhan
2016-08-30 20:40:58 +08:00
committed by Wu Jian Gang
parent 0f83831c74
commit 2d80fada70
11 changed files with 659 additions and 86 deletions
Download Patch File Download Diff File Expand all files Collapse all files

147
components/mbedtls/include/mbedtls/esp_config.h
View File

@@ -225,7 +225,7 @@
* Uncomment a macro to enable alternate implementation of the corresponding
* module.
*/
#define MBEDTLS_AES_ALT
//#define MBEDTLS_AES_ALT
//#define MBEDTLS_ARC4_ALT
//#define MBEDTLS_BLOWFISH_ALT
//#define MBEDTLS_CAMELLIA_ALT
@@ -235,11 +235,11 @@
//#define MBEDTLS_MD4_ALT
//#define MBEDTLS_MD5_ALT
//#define MBEDTLS_RIPEMD160_ALT
#define MBEDTLS_SHA1_ALT
#define MBEDTLS_SHA256_ALT
#define MBEDTLS_SHA512_ALT
//#define MBEDTLS_SHA1_ALT
//#define MBEDTLS_SHA256_ALT
//#define MBEDTLS_SHA512_ALT
#define MBEDTLS_BIGNUM_ALT
//#define MBEDTLS_BIGNUM_ALT
/**
* \def MBEDTLS_MD2_PROCESS_ALT
*
@@ -374,10 +374,10 @@
*
* Enable padding modes in the cipher layer.
*/
//#define MBEDTLS_CIPHER_PADDING_PKCS7
//#define MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS
//#define MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN
//#define MBEDTLS_CIPHER_PADDING_ZEROS
#define MBEDTLS_CIPHER_PADDING_PKCS7
#define MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS
#define MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN
#define MBEDTLS_CIPHER_PADDING_ZEROS
/**
* \def MBEDTLS_ENABLE_WEAK_CIPHERSUITES
@@ -415,18 +415,18 @@
*
* Comment macros to disable the curve and functions for it
*/
//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
//#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
//#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
//#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
//#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
#define MBEDTLS_ECP_DP_SECP256R1_ENABLED
#define MBEDTLS_ECP_DP_SECP384R1_ENABLED
#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
#define MBEDTLS_ECP_DP_SECP256K1_ENABLED
#define MBEDTLS_ECP_DP_BP256R1_ENABLED
#define MBEDTLS_ECP_DP_BP384R1_ENABLED
#define MBEDTLS_ECP_DP_BP512R1_ENABLED
#define MBEDTLS_ECP_DP_CURVE25519_ENABLED
/**
* \def MBEDTLS_ECP_NIST_OPTIM
@@ -437,7 +437,7 @@
*
* Comment this macro to disable NIST curves optimisation.
*/
//#define MBEDTLS_ECP_NIST_OPTIM
#define MBEDTLS_ECP_NIST_OPTIM
/**
* \def MBEDTLS_ECDSA_DETERMINISTIC
@@ -451,7 +451,7 @@
*
* Comment this macro to disable deterministic ECDSA.
*/
//#define MBEDTLS_ECDSA_DETERMINISTIC
#define MBEDTLS_ECDSA_DETERMINISTIC
/**
* \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
@@ -473,7 +473,7 @@
* MBEDTLS_TLS_PSK_WITH_3DES_EDE_CBC_SHA
* MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
*/
//#define MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
#define MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
/**
* \def MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
@@ -497,7 +497,7 @@
* MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
* MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
*/
//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
/**
* \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
@@ -517,7 +517,7 @@
* MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
* MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
*/
//#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
/**
* \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
@@ -596,7 +596,7 @@
* MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
* MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
*/
//#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
/**
* \def MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
@@ -621,7 +621,7 @@
* MBEDTLS_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
* MBEDTLS_TLS_ECDHE_RSA_WITH_RC4_128_SHA
*/
//#define MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
#define MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
/**
* \def MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
@@ -645,7 +645,7 @@
* MBEDTLS_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA
* MBEDTLS_TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
*/
//#define MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
#define MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
/**
* \def MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
@@ -669,7 +669,7 @@
* MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
* MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
*/
//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
/**
* \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
@@ -693,7 +693,7 @@
* MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
* MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
*/
//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
/**
* \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
@@ -946,7 +946,7 @@
*
* Comment this macro to disable support for Encrypt-then-MAC
*/
//#define MBEDTLS_SSL_ENCRYPT_THEN_MAC
#define MBEDTLS_SSL_ENCRYPT_THEN_MAC
/** \def MBEDTLS_SSL_EXTENDED_MASTER_SECRET
*
@@ -964,7 +964,7 @@
*
* Comment this macro to disable support for Extended Master Secret.
*/
//#define MBEDTLS_SSL_EXTENDED_MASTER_SECRET
#define MBEDTLS_SSL_EXTENDED_MASTER_SECRET
/**
* \def MBEDTLS_SSL_FALLBACK_SCSV
@@ -981,7 +981,7 @@
*
* Comment this macro to disable support for FALLBACK_SCSV
*/
//#define MBEDTLS_SSL_FALLBACK_SCSV
#define MBEDTLS_SSL_FALLBACK_SCSV
/**
* \def MBEDTLS_SSL_HW_RECORD_ACCEL
@@ -1018,7 +1018,7 @@
*
* Comment this to disable support for renegotiation.
*/
//#define MBEDTLS_SSL_RENEGOTIATION
#define MBEDTLS_SSL_RENEGOTIATION
/**
* \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
@@ -1047,7 +1047,7 @@
*
* Comment this macro to disable support for the max_fragment_length extension
*/
//#define MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
#define MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
/**
* \def MBEDTLS_SSL_PROTO_SSL3
@@ -1059,7 +1059,7 @@
*
* Comment this macro to disable support for SSL 3.0
*/
//#define MBEDTLS_SSL_PROTO_SSL3
#define MBEDTLS_SSL_PROTO_SSL3
/**
* \def MBEDTLS_SSL_PROTO_TLS1
@@ -1110,7 +1110,7 @@
*
* Comment this macro to disable support for DTLS
*/
//#define MBEDTLS_SSL_PROTO_DTLS
#define MBEDTLS_SSL_PROTO_DTLS
/**
* \def MBEDTLS_SSL_ALPN
@@ -1119,7 +1119,7 @@
*
* Comment this macro to disable support for ALPN.
*/
//#define MBEDTLS_SSL_ALPN
#define MBEDTLS_SSL_ALPN
/**
* \def MBEDTLS_SSL_DTLS_ANTI_REPLAY
@@ -1134,7 +1134,7 @@
*
* Comment this to disable anti-replay in DTLS.
*/
//#define MBEDTLS_SSL_DTLS_ANTI_REPLAY
#define MBEDTLS_SSL_DTLS_ANTI_REPLAY
/**
* \def MBEDTLS_SSL_DTLS_HELLO_VERIFY
@@ -1152,7 +1152,7 @@
*
* Comment this to disable support for HelloVerifyRequest.
*/
//#define MBEDTLS_SSL_DTLS_HELLO_VERIFY
#define MBEDTLS_SSL_DTLS_HELLO_VERIFY
/**
* \def MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
@@ -1168,7 +1168,7 @@
*
* Comment this to disable support for clients reusing the source port.
*/
//#define MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
#define MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
/**
* \def MBEDTLS_SSL_DTLS_BADMAC_LIMIT
@@ -1179,7 +1179,7 @@
*
* Requires: MBEDTLS_SSL_PROTO_DTLS
*/
//#define MBEDTLS_SSL_DTLS_BADMAC_LIMIT
#define MBEDTLS_SSL_DTLS_BADMAC_LIMIT
/**
* \def MBEDTLS_SSL_SESSION_TICKETS
@@ -1193,7 +1193,7 @@
*
* Comment this macro to disable support for SSL session tickets
*/
//#define MBEDTLS_SSL_SESSION_TICKETS
#define MBEDTLS_SSL_SESSION_TICKETS
/**
* \def MBEDTLS_SSL_EXPORT_KEYS
@@ -1203,7 +1203,7 @@
*
* Comment this macro to disable support for key export
*/
//#define MBEDTLS_SSL_EXPORT_KEYS
#define MBEDTLS_SSL_EXPORT_KEYS
/**
* \def MBEDTLS_SSL_SERVER_NAME_INDICATION
@@ -1223,7 +1223,7 @@
*
* Comment this macro to disable support for truncated HMAC in SSL
*/
//#define MBEDTLS_SSL_TRUNCATED_HMAC
#define MBEDTLS_SSL_TRUNCATED_HMAC
/**
* \def MBEDTLS_THREADING_ALT
@@ -1258,7 +1258,7 @@
*
* Comment this to disable run-time checking and save ROM space
*/
//#define MBEDTLS_VERSION_FEATURES
#define MBEDTLS_VERSION_FEATURES
/**
* \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
@@ -1294,7 +1294,7 @@
*
* Comment to skip keyUsage checking for both CA and leaf certificates.
*/
//#define MBEDTLS_X509_CHECK_KEY_USAGE
#define MBEDTLS_X509_CHECK_KEY_USAGE
/**
* \def MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
@@ -1307,7 +1307,7 @@
*
* Comment to skip extendedKeyUsage checking for certificates.
*/
//#define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
#define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
/**
* \def MBEDTLS_X509_RSASSA_PSS_SUPPORT
@@ -1317,7 +1317,7 @@
*
* Comment this macro to disallow using RSASSA-PSS in certificates.
*/
//#define MBEDTLS_X509_RSASSA_PSS_SUPPORT
#define MBEDTLS_X509_RSASSA_PSS_SUPPORT
/**
* \def MBEDTLS_ZLIB_SUPPORT
@@ -1459,7 +1459,7 @@
* MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
* MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
*/
//#define MBEDTLS_ARC4_C
#define MBEDTLS_ARC4_C
/**
* \def MBEDTLS_ASN1_PARSE_C
@@ -1524,7 +1524,7 @@
*
* Module: library/blowfish.c
*/
//#define MBEDTLS_BLOWFISH_C
#define MBEDTLS_BLOWFISH_C
/**
* \def MBEDTLS_CAMELLIA_C
@@ -1579,7 +1579,7 @@
* MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
* MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
*/
//#define MBEDTLS_CAMELLIA_C
#define MBEDTLS_CAMELLIA_C
/**
* \def MBEDTLS_CCM_C
@@ -1593,7 +1593,7 @@
* This module enables the AES-CCM ciphersuites, if other requisites are
* enabled as well.
*/
//#define MBEDTLS_CCM_C
#define MBEDTLS_CCM_C
/**
* \def MBEDTLS_CERTS_C
@@ -1605,7 +1605,7 @@
*
* This module is used for testing (ssl_client/server).
*/
//#define MBEDTLS_CERTS_C
#define MBEDTLS_CERTS_C
/**
* \def MBEDTLS_CIPHER_C
@@ -1645,7 +1645,7 @@
*
* This module provides debugging functions.
*/
//#define MBEDTLS_DEBUG_C
#define MBEDTLS_DEBUG_C
/**
* \def MBEDTLS_DES_C
@@ -1671,7 +1671,7 @@
*
* PEM_PARSE uses DES/3DES for decrypting encrypted keys.
*/
//#define MBEDTLS_DES_C
#define MBEDTLS_DES_C
/**
* \def MBEDTLS_DHM_C
@@ -1685,7 +1685,7 @@
* This module is used by the following key exchanges:
* DHE-RSA, DHE-PSK
*/
//#define MBEDTLS_DHM_C
#define MBEDTLS_DHM_C
/**
* \def MBEDTLS_ECDH_C
@@ -1701,7 +1701,7 @@
*
* Requires: MBEDTLS_ECP_C
*/
//#define MBEDTLS_ECDH_C
#define MBEDTLS_ECDH_C
/**
* \def MBEDTLS_ECDSA_C
@@ -1716,7 +1716,7 @@
*
* Requires: MBEDTLS_ECP_C, MBEDTLS_ASN1_WRITE_C, MBEDTLS_ASN1_PARSE_C
*/
//#define MBEDTLS_ECDSA_C
#define MBEDTLS_ECDSA_C
/**
* \def MBEDTLS_ECJPAKE_C
@@ -1749,7 +1749,7 @@
*
* Requires: MBEDTLS_BIGNUM_C and at least one MBEDTLS_ECP_DP_XXX_ENABLED
*/
//#define MBEDTLS_ECP_C
#define MBEDTLS_ECP_C
/**
* \def MBEDTLS_ENTROPY_C
@@ -1775,7 +1775,7 @@
*
* This module enables mbedtls_strerror().
*/
//#define MBEDTLS_ERROR_C
#define MBEDTLS_ERROR_C
/**
* \def MBEDTLS_GCM_C
@@ -1789,7 +1789,7 @@
* This module enables the AES-GCM and CAMELLIA-GCM ciphersuites, if other
* requisites are enabled as well.
*/
//#define MBEDTLS_GCM_C //764 Byte
#define MBEDTLS_GCM_C
/**
* \def MBEDTLS_HAVEGE_C
@@ -1826,7 +1826,7 @@
*
* Uncomment to enable the HMAC_DRBG random number geerator.
*/
//#define MBEDTLS_HMAC_DRBG_C
#define MBEDTLS_HMAC_DRBG_C
/**
* \def MBEDTLS_MD_C
@@ -1941,7 +1941,7 @@
*
* This modules adds support for the VIA PadLock on x86.
*/
//#define MBEDTLS_PADLOCK_C
#define MBEDTLS_PADLOCK_C
/**
* \def MBEDTLS_PEM_PARSE_C
@@ -2033,7 +2033,7 @@
*
* This module adds support for the PKCS#5 functions.
*/
//#define MBEDTLS_PKCS5_C
#define MBEDTLS_PKCS5_C
/**
* \def MBEDTLS_PKCS11_C
@@ -2064,7 +2064,7 @@
*
* This module enables PKCS#12 functions.
*/
//#define MBEDTLS_PKCS12_C
#define MBEDTLS_PKCS12_C
/**
* \def MBEDTLS_PLATFORM_C
@@ -2084,7 +2084,7 @@
*
* This module enables abstraction of common (libc) functions.
*/
//#define MBEDTLS_PLATFORM_C
#define MBEDTLS_PLATFORM_C
/**
* \def MBEDTLS_RIPEMD160_C
@@ -2095,7 +2095,7 @@
* Caller: library/mbedtls_md.c
*
*/
//#define MBEDTLS_RIPEMD160_C
#define MBEDTLS_RIPEMD160_C
/**
* \def MBEDTLS_RSA_C
@@ -2173,7 +2173,7 @@
*
* Requires: MBEDTLS_SSL_CACHE_C
*/
//#define MBEDTLS_SSL_CACHE_C
#define MBEDTLS_SSL_CACHE_C
/**
* \def MBEDTLS_SSL_COOKIE_C
@@ -2183,7 +2183,7 @@
* Module: library/ssl_cookie.c
* Caller:
*/
//#define MBEDTLS_SSL_COOKIE_C
#define MBEDTLS_SSL_COOKIE_C
/**
* \def MBEDTLS_SSL_TICKET_C
@@ -2195,7 +2195,7 @@
*
* Requires: MBEDTLS_CIPHER_C
*/
//#define MBEDTLS_SSL_TICKET_C
#define MBEDTLS_SSL_TICKET_C
/**
* \def MBEDTLS_SSL_CLI_C
@@ -2466,7 +2466,8 @@
//#define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /**< Maximum entries in cache */
/* SSL options */
#define MBEDTLS_SSL_MAX_CONTENT_LEN 3072 /**< Maxium fragment length in bytes, determines the size of each of the two internal I/O buffers */
#define MBEDTLS_SSL_MAX_CONTENT_LEN 5120 /**< Maxium fragment length in bytes, determines the size of each of the two internal I/O buffers */
//#define MBEDTLS_SSL_DEFAULT_TICKET_LIFETIME 86400 /**< Lifetime of session tickets (if enabled) */
//#define MBEDTLS_PSK_MAX_LEN 32 /**< Max size of TLS pre-shared keys, in bytes (default 256 bits) */
//#define MBEDTLS_SSL_COOKIE_TIMEOUT 60 /**< Default expiration delay of DTLS cookies, in seconds if HAVE_TIME, or in number of cookies issued */