mirror of
https://github.com/espressif/esp-rainmaker.git
synced 2026-01-19 09:45:35 +00:00
93a2b36160
Instead of using 1 or 2 certificates for server authentication, use a bundle of commonly used server certificates, so that even if the server moves to a different signing authority, the device connection is not affected. This change has been done for claiming, OTA and MQTT certificates.
30 lines
895 B
Plaintext
30 lines
895 B
Plaintext
CONFIG_ESPTOOLPY_FLASHSIZE_4MB=y
|
|
CONFIG_PARTITION_TABLE_SINGLE_APP=
|
|
CONFIG_PARTITION_TABLE_TWO_OTA=
|
|
CONFIG_PARTITION_TABLE_CUSTOM=y
|
|
CONFIG_PARTITION_TABLE_CUSTOM_FILENAME="partitions.csv"
|
|
CONFIG_PARTITION_TABLE_FILENAME="partitions.csv"
|
|
CONFIG_PARTITION_TABLE_OFFSET=0x8000
|
|
CONFIG_PARTITION_TABLE_MD5=y
|
|
|
|
# mbedtls
|
|
CONFIG_MBEDTLS_DYNAMIC_BUFFER=y
|
|
CONFIG_MBEDTLS_DYNAMIC_FREE_PEER_CERT=y
|
|
CONFIG_MBEDTLS_DYNAMIC_FREE_CONFIG_DATA=y
|
|
CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_CMN=y
|
|
|
|
# For BLE Provisioning using NimBLE stack (Not applicable for ESP32-S2)
|
|
CONFIG_BT_ENABLED=y
|
|
CONFIG_BTDM_CTRL_MODE_BLE_ONLY=y
|
|
CONFIG_BT_NIMBLE_ENABLED=y
|
|
|
|
# Temporary Fix for Timer Overflows
|
|
CONFIG_FREERTOS_TIMER_TASK_STACK_DEPTH=3120
|
|
|
|
# For additional security on reset to factory
|
|
CONFIG_ESP_RMAKER_USER_ID_CHECK=y
|
|
|
|
# Secure Local Control
|
|
CONFIG_ESP_RMAKER_LOCAL_CTRL_ENABLE=y
|
|
CONFIG_ESP_RMAKER_LOCAL_CTRL_SECURITY_1=y
|