esp_wifi: WPA2 enterprise related changes

1. Removed DHE ciphers when mbedTLS is disabled since they take
too much processing power.
2. Removed support of SHA384 and SHA512 when mbedTLS is disabled
due to too much processing needed.
3. Fixed bugs in crypto_hash_init API which was causing
EAP connections to fail when mbedTLS was enabled.
4. Cleaned some code of crypto_hash_***
This commit is contained in:
Kapil Gupta
2022-07-21 11:06:30 +05:30
parent db7df70331
commit 951928960b
5 changed files with 42 additions and 24 deletions

View File

@@ -483,15 +483,25 @@ struct tlsv1_client * tlsv1_client_init(void)
count = 0;
suites = conn->cipher_suites;
#ifdef CONFIG_CRYPTO_MBEDTLS
suites[count++] = TLS_DHE_RSA_WITH_AES_256_CBC_SHA256;
#endif
suites[count++] = TLS_RSA_WITH_AES_256_CBC_SHA256;
#ifdef CONFIG_CRYPTO_MBEDTLS
suites[count++] = TLS_DHE_RSA_WITH_AES_256_CBC_SHA;
#endif
suites[count++] = TLS_RSA_WITH_AES_256_CBC_SHA;
#ifdef CONFIG_CRYPTO_MBEDTLS
suites[count++] = TLS_DHE_RSA_WITH_AES_128_CBC_SHA256;
#endif
suites[count++] = TLS_RSA_WITH_AES_128_CBC_SHA256;
#ifdef CONFIG_CRYPTO_MBEDTLS
suites[count++] = TLS_DHE_RSA_WITH_AES_128_CBC_SHA;
#endif
suites[count++] = TLS_RSA_WITH_AES_128_CBC_SHA;
#ifdef CONFIG_CRYPTO_MBEDTLS
suites[count++] = TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA;
#endif
suites[count++] = TLS_RSA_WITH_3DES_EDE_CBC_SHA;
suites[count++] = TLS_RSA_WITH_RC4_128_SHA;
suites[count++] = TLS_RSA_WITH_RC4_128_MD5;