mbedtls: disable Diffie-Hellman key exchange modes by default

Using these ciphers can constitute a security risk if the server
uses a weak prime for the key exchange.

Footprint impact:
Roughly 3K saved in text+rodata in default https_request example
This commit is contained in:
Mahavir Jain
2021-10-25 18:35:50 +05:30
committed by bot
parent 4e5648ea98
commit 8c9a3da695
3 changed files with 18 additions and 3 deletions

View File

@@ -1601,7 +1601,11 @@
* This module is used by the following key exchanges:
* DHE-RSA, DHE-PSK
*/
#ifdef CONFIG_MBEDTLS_DHM_C
#define MBEDTLS_DHM_C
#else
#undef MBEDTLS_DHM_C
#endif
/**
* \def MBEDTLS_ECDH_C