user_mbedtls.h 13 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321
  1. #include "c_types.h"
  2. #include "user_config.h"
  3. #undef MBEDTLS_HAVE_ASM
  4. #undef MBEDTLS_HAVE_SSE2
  5. // These are disabled until we have a real, working RTC-based gettimeofday
  6. #undef MBEDTLS_HAVE_TIME
  7. #undef MBEDTLS_HAVE_TIME_DATE
  8. #define MBEDTLS_PLATFORM_MEMORY
  9. #undef MBEDTLS_PLATFORM_NO_STD_FUNCTIONS
  10. #undef MBEDTLS_PLATFORM_EXIT_ALT
  11. #undef MBEDTLS_PLATFORM_TIME_ALT
  12. #undef MBEDTLS_PLATFORM_FPRINTF_ALT
  13. #undef MBEDTLS_PLATFORM_PRINTF_ALT
  14. #undef MBEDTLS_PLATFORM_SNPRINTF_ALT
  15. #undef MBEDTLS_PLATFORM_NV_SEED_ALT
  16. #undef MBEDTLS_DEPRECATED_WARNING
  17. #define MBEDTLS_DEPRECATED_REMOVED
  18. #undef MBEDTLS_TIMING_ALT
  19. #undef MBEDTLS_AES_ALT
  20. #undef MBEDTLS_ARC4_ALT
  21. #undef MBEDTLS_BLOWFISH_ALT
  22. #undef MBEDTLS_CAMELLIA_ALT
  23. #undef MBEDTLS_DES_ALT
  24. #undef MBEDTLS_XTEA_ALT
  25. #undef MBEDTLS_MD2_ALT
  26. #undef MBEDTLS_MD4_ALT
  27. #undef MBEDTLS_MD5_ALT
  28. #undef MBEDTLS_RIPEMD160_ALT
  29. #undef MBEDTLS_SHA1_ALT
  30. #undef MBEDTLS_SHA256_ALT
  31. #undef MBEDTLS_SHA512_ALT
  32. #undef MBEDTLS_MD2_PROCESS_ALT
  33. #undef MBEDTLS_MD4_PROCESS_ALT
  34. #undef MBEDTLS_MD5_PROCESS_ALT
  35. #undef MBEDTLS_RIPEMD160_PROCESS_ALT
  36. #undef MBEDTLS_SHA1_PROCESS_ALT
  37. #undef MBEDTLS_SHA256_PROCESS_ALT
  38. #undef MBEDTLS_SHA512_PROCESS_ALT
  39. #undef MBEDTLS_DES_SETKEY_ALT
  40. #undef MBEDTLS_DES_CRYPT_ECB_ALT
  41. #undef MBEDTLS_DES3_CRYPT_ECB_ALT
  42. #undef MBEDTLS_AES_SETKEY_ENC_ALT
  43. #undef MBEDTLS_AES_SETKEY_DEC_ALT
  44. #undef MBEDTLS_AES_ENCRYPT_ALT
  45. #undef MBEDTLS_AES_DECRYPT_ALT
  46. #undef MBEDTLS_TEST_NULL_ENTROPY
  47. #define MBEDTLS_ENTROPY_HARDWARE_ALT
  48. #define MBEDTLS_AES_ROM_TABLES
  49. #define MBEDTLS_CAMELLIA_SMALL_MEMORY
  50. #define MBEDTLS_CIPHER_MODE_CBC
  51. #define MBEDTLS_CIPHER_MODE_CFB
  52. #define MBEDTLS_CIPHER_MODE_CTR
  53. #undef MBEDTLS_CIPHER_NULL_CIPHER
  54. #define MBEDTLS_CIPHER_PADDING_PKCS7
  55. #define MBEDTLS_CIPHER_PADDING_ONE_AND_ZEROS
  56. #define MBEDTLS_CIPHER_PADDING_ZEROS_AND_LEN
  57. #define MBEDTLS_CIPHER_PADDING_ZEROS
  58. #undef MBEDTLS_ENABLE_WEAK_CIPHERSUITES
  59. #define MBEDTLS_REMOVE_ARC4_CIPHERSUITES
  60. #undef MBEDTLS_ECP_DP_SECP192R1_ENABLED
  61. #undef MBEDTLS_ECP_DP_SECP224R1_ENABLED
  62. #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
  63. #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
  64. #undef MBEDTLS_ECP_DP_SECP521R1_ENABLED
  65. #undef MBEDTLS_ECP_DP_SECP192K1_ENABLED
  66. #undef MBEDTLS_ECP_DP_SECP224K1_ENABLED
  67. #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
  68. #define MBEDTLS_ECP_DP_BP256R1_ENABLED
  69. #define MBEDTLS_ECP_DP_BP384R1_ENABLED
  70. #undef MBEDTLS_ECP_DP_BP512R1_ENABLED
  71. #undef MBEDTLS_ECP_DP_CURVE25519_ENABLED /* Not exported on the wire yet :( */
  72. #define MBEDTLS_ECP_NIST_OPTIM
  73. #define MBEDTLS_ECDSA_DETERMINISTIC
  74. #undef MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
  75. #undef MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
  76. #undef MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
  77. #undef MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
  78. #undef MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
  79. #define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
  80. #define MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
  81. #define MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
  82. #undef MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
  83. #undef MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
  84. #undef MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
  85. #define MBEDTLS_PK_PARSE_EC_EXTENDED
  86. #undef MBEDTLS_ERROR_STRERROR_DUMMY
  87. #undef MBEDTLS_GENPRIME
  88. #undef MBEDTLS_FS_IO
  89. #undef MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES
  90. #define MBEDTLS_NO_PLATFORM_ENTROPY
  91. #define MBEDTLS_ENTROPY_FORCE_SHA256
  92. #undef MBEDTLS_ENTROPY_NV_SEED
  93. #undef MBEDTLS_MEMORY_DEBUG
  94. #undef MBEDTLS_MEMORY_BACKTRACE
  95. #define MBEDTLS_PK_RSA_ALT_SUPPORT
  96. #define MBEDTLS_PKCS1_V15
  97. #define MBEDTLS_PKCS1_V21
  98. #undef MBEDTLS_RSA_NO_CRT
  99. #undef MBEDTLS_SELF_TEST
  100. #define MBEDTLS_SHA256_SMALLER
  101. #define MBEDTLS_SSL_ALL_ALERT_MESSAGES
  102. #undef MBEDTLS_SSL_DEBUG_ALL
  103. #define MBEDTLS_SSL_ENCRYPT_THEN_MAC
  104. #define MBEDTLS_SSL_EXTENDED_MASTER_SECRET
  105. #define MBEDTLS_SSL_FALLBACK_SCSV
  106. #undef MBEDTLS_SSL_HW_RECORD_ACCEL
  107. #undef MBEDTLS_SSL_CBC_RECORD_SPLITTING
  108. #undef MBEDTLS_SSL_RENEGOTIATION
  109. #undef MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
  110. #undef MBEDTLS_SSL_SRV_RESPECT_CLIENT_PREFERENCE
  111. #define MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
  112. #undef MBEDTLS_SSL_PROTO_SSL3
  113. #undef MBEDTLS_SSL_PROTO_TLS1
  114. #define MBEDTLS_SSL_PROTO_TLS1_1
  115. #define MBEDTLS_SSL_PROTO_TLS1_2
  116. #undef MBEDTLS_SSL_PROTO_DTLS
  117. #define MBEDTLS_SSL_ALPN
  118. #undef MBEDTLS_SSL_DTLS_ANTI_REPLAY
  119. #undef MBEDTLS_SSL_DTLS_HELLO_VERIFY
  120. #undef MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
  121. #undef MBEDTLS_SSL_DTLS_BADMAC_LIMIT
  122. #define MBEDTLS_SSL_SESSION_TICKETS
  123. #define MBEDTLS_SSL_EXPORT_KEYS
  124. #define MBEDTLS_SSL_SERVER_NAME_INDICATION
  125. #define MBEDTLS_SSL_TRUNCATED_HMAC
  126. #undef MBEDTLS_THREADING_ALT
  127. #undef MBEDTLS_THREADING_PTHREAD
  128. #define MBEDTLS_VERSION_FEATURES
  129. #undef MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
  130. #undef MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION
  131. #define MBEDTLS_X509_CHECK_KEY_USAGE
  132. #define MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
  133. #define MBEDTLS_X509_RSASSA_PSS_SUPPORT
  134. #undef MBEDTLS_ZLIB_SUPPORT
  135. #undef MBEDTLS_AESNI_C
  136. #define MBEDTLS_AES_C
  137. #undef MBEDTLS_ARC4_C
  138. #define MBEDTLS_ASN1_PARSE_C
  139. #define MBEDTLS_ASN1_WRITE_C
  140. #define MBEDTLS_BASE64_C
  141. #define MBEDTLS_BIGNUM_C
  142. #undef MBEDTLS_BLOWFISH_C
  143. #define MBEDTLS_CAMELLIA_C
  144. #define MBEDTLS_CCM_C
  145. #undef MBEDTLS_CERTS_C
  146. #define MBEDTLS_CIPHER_C
  147. #define MBEDTLS_CMAC_C
  148. #define MBEDTLS_CTR_DRBG_C
  149. #ifdef DEVELOP_VERSION
  150. # define MBEDTLS_DEBUG_C
  151. #else
  152. # undef MBEDTLS_DEBUG_C
  153. #endif
  154. #undef MBEDTLS_DES_C
  155. #define MBEDTLS_DHM_C
  156. #define MBEDTLS_ECDH_C
  157. #define MBEDTLS_ECDSA_C
  158. #undef MBEDTLS_ECJPAKE_C
  159. #define MBEDTLS_ECP_C
  160. #define MBEDTLS_ENTROPY_C
  161. #define MBEDTLS_ERROR_C
  162. #define MBEDTLS_GCM_C
  163. #undef MBEDTLS_HAVEGE_C
  164. #define MBEDTLS_HMAC_DRBG_C
  165. #define MBEDTLS_MD_C
  166. #undef MBEDTLS_MD2_C
  167. #undef MBEDTLS_MD4_C
  168. #define MBEDTLS_MD5_C /* Remove when we drop support for TLS 1.1 */
  169. #undef MBEDTLS_MEMORY_BUFFER_ALLOC_C
  170. #define MBEDTLS_NET_C
  171. #define MBEDTLS_OID_C
  172. #undef MBEDTLS_PADLOCK_C
  173. #define MBEDTLS_PEM_PARSE_C
  174. #define MBEDTLS_PEM_WRITE_C
  175. #define MBEDTLS_PK_C
  176. #define MBEDTLS_PK_PARSE_C
  177. #define MBEDTLS_PK_WRITE_C
  178. #define MBEDTLS_PKCS5_C
  179. #undef MBEDTLS_PKCS11_C
  180. #define MBEDTLS_PKCS12_C
  181. #define MBEDTLS_PLATFORM_C
  182. #define MBEDTLS_RIPEMD160_C
  183. #define MBEDTLS_RSA_C
  184. #define MBEDTLS_SHA1_C
  185. #define MBEDTLS_SHA256_C
  186. #define MBEDTLS_SHA512_C
  187. #define MBEDTLS_SSL_CACHE_C
  188. #define MBEDTLS_SSL_COOKIE_C
  189. #define MBEDTLS_SSL_TICKET_C
  190. #define MBEDTLS_SSL_CLI_C
  191. #define MBEDTLS_SSL_SRV_C
  192. #define MBEDTLS_SSL_TLS_C
  193. #undef MBEDTLS_THREADING_C
  194. #undef MBEDTLS_TIMING_C
  195. #define MBEDTLS_VERSION_C
  196. #define MBEDTLS_X509_USE_C
  197. #define MBEDTLS_X509_CRT_PARSE_C
  198. #define MBEDTLS_X509_CRL_PARSE_C
  199. #define MBEDTLS_X509_CSR_PARSE_C
  200. #define MBEDTLS_X509_CREATE_C
  201. #define MBEDTLS_X509_CRT_WRITE_C
  202. #define MBEDTLS_X509_CSR_WRITE_C
  203. #undef MBEDTLS_XTEA_C
  204. #define MBEDTLS_MPI_WINDOW_SIZE 1 /**< Maximum windows size used. */
  205. #define MBEDTLS_MPI_MAX_SIZE 512 /**< Maximum number of bytes for usable MPIs. */
  206. //#define MBEDTLS_CTR_DRBG_ENTROPY_LEN 48 /**< Amount of entropy used per seed by default (48 with SHA-512, 32 with SHA-256) */
  207. #define MBEDTLS_CTR_DRBG_RESEED_INTERVAL 1000 /**< Interval before reseed is performed by default */
  208. //#define MBEDTLS_CTR_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */
  209. //#define MBEDTLS_CTR_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */
  210. //#define MBEDTLS_CTR_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */
  211. #define MBEDTLS_HMAC_DRBG_RESEED_INTERVAL 1000 /**< Interval before reseed is performed by default */
  212. //#define MBEDTLS_HMAC_DRBG_MAX_INPUT 256 /**< Maximum number of additional input bytes */
  213. //#define MBEDTLS_HMAC_DRBG_MAX_REQUEST 1024 /**< Maximum number of requested bytes per call */
  214. //#define MBEDTLS_HMAC_DRBG_MAX_SEED_INPUT 384 /**< Maximum size of (re)seed buffer */
  215. #define MBEDTLS_ECP_MAX_BITS 384 /**< Maximum bit size of groups */
  216. #define MBEDTLS_ECP_WINDOW_SIZE 2 /**< Maximum window size used */
  217. #define MBEDTLS_ECP_FIXED_POINT_OPTIM 0 /**< Enable fixed-point speed-up */
  218. //#define MBEDTLS_ENTROPY_MAX_SOURCES 20 /**< Maximum number of sources supported */
  219. //#define MBEDTLS_ENTROPY_MAX_GATHER 128 /**< Maximum amount requested from entropy sources */
  220. //#define MBEDTLS_ENTROPY_MIN_HARDWARE 32 /**< Default minimum number of bytes required for the hardware entropy source mbedtls_hardware_poll() before entropy is released */
  221. //#define MBEDTLS_MEMORY_ALIGN_MULTIPLE 4 /**< Align on multiples of this value */
  222. //#define MBEDTLS_PLATFORM_STD_MEM_HDR <stdlib.h> /**< Header to include if MBEDTLS_PLATFORM_NO_STD_FUNCTIONS is defined. Don't define if no header is needed. */
  223. #define MBEDTLS_PLATFORM_STD_CALLOC pvPortCalloc /**< Default allocator to use, can be undefined */
  224. #define MBEDTLS_PLATFORM_STD_FREE vPortFree /**< Default free to use, can be undefined */
  225. //#define MBEDTLS_PLATFORM_STD_EXIT exit /**< Default exit to use, can be undefined */
  226. //#define MBEDTLS_PLATFORM_STD_TIME time /**< Default time to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
  227. //#define MBEDTLS_PLATFORM_STD_FPRINTF fprintf /**< Default fprintf to use, can be undefined */
  228. //#define MBEDTLS_PLATFORM_STD_PRINTF printf /**< Default printf to use, can be undefined */
  229. //#define MBEDTLS_PLATFORM_STD_SNPRINTF snprintf /**< Default snprintf to use, can be undefined */
  230. //#define MBEDTLS_PLATFORM_STD_EXIT_SUCCESS 0 /**< Default exit value to use, can be undefined */
  231. //#define MBEDTLS_PLATFORM_STD_EXIT_FAILURE 1 /**< Default exit value to use, can be undefined */
  232. //#define MBEDTLS_PLATFORM_STD_NV_SEED_READ mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */
  233. //#define MBEDTLS_PLATFORM_STD_NV_SEED_WRITE mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */
  234. //#define MBEDTLS_PLATFORM_STD_NV_SEED_FILE "seedfile" /**< Seed file to read/write with default implementation */
  235. //#define MBEDTLS_PLATFORM_CALLOC_MACRO calloc /**< Default allocator macro to use, can be undefined */
  236. //#define MBEDTLS_PLATFORM_FREE_MACRO free /**< Default free macro to use, can be undefined */
  237. //#define MBEDTLS_PLATFORM_EXIT_MACRO exit /**< Default exit macro to use, can be undefined */
  238. //#define MBEDTLS_PLATFORM_TIME_MACRO time /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
  239. //#define MBEDTLS_PLATFORM_TIME_TYPE_MACRO time_t /**< Default time macro to use, can be undefined. MBEDTLS_HAVE_TIME must be enabled */
  240. //#define MBEDTLS_PLATFORM_FPRINTF_MACRO fprintf /**< Default fprintf macro to use, can be undefined */
  241. #define MBEDTLS_PLATFORM_PRINTF_MACRO ets_printf /**< Default printf macro to use, can be undefined */
  242. #define MBEDTLS_PLATFORM_SNPRINTF_MACRO ets_snprintf /**< Default snprintf macro to use, can be undefined */
  243. #define MBEDTLS_PLATFORM_VSNPRINTF_MACRO ets_vsnprintf /**< Default vsnprintf macro to use, can be undefined */
  244. //#define MBEDTLS_PLATFORM_NV_SEED_READ_MACRO mbedtls_platform_std_nv_seed_read /**< Default nv_seed_read function to use, can be undefined */
  245. //#define MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO mbedtls_platform_std_nv_seed_write /**< Default nv_seed_write function to use, can be undefined */
  246. //#define MBEDTLS_SSL_CACHE_DEFAULT_TIMEOUT 86400 /**< 1 day */
  247. //#define MBEDTLS_SSL_CACHE_DEFAULT_MAX_ENTRIES 50 /**< Maximum entries in cache */
  248. #if 0
  249. // dynamic buffer sizing with espconn_secure_set_size()
  250. extern unsigned int max_content_len;
  251. #define MBEDTLS_SSL_MAX_CONTENT_LEN max_content_len;
  252. #else
  253. // the current mbedtls integration doesn't allow to set the buffer size dynamically:
  254. // MBEDTLS_SSL_MAX_FRAGMENT_LENGTH feature and dynamic sizing are mutually exclusive
  255. // due to non-constant initializer element in app/mbedtls/library/ssl_tls.c:150
  256. // the buffer size is hardcoded here and value is taken from SSL_BUFFER_SIZE (user_config.h)
  257. #define MBEDTLS_SSL_MAX_CONTENT_LEN SSL_BUFFER_SIZE /**< Maxium fragment length in bytes, determines the size of each of the two internal I/O buffers */
  258. #endif
  259. //#define MBEDTLS_SSL_DEFAULT_TICKET_LIFETIME 86400 /**< Lifetime of session tickets (if enabled) */
  260. //#define MBEDTLS_PSK_MAX_LEN 32 /**< Max size of TLS pre-shared keys, in bytes (default 256 bits) */
  261. //#define MBEDTLS_SSL_COOKIE_TIMEOUT 60 /**< Default expiration delay of DTLS cookies, in seconds if HAVE_TIME, or in number of cookies issued */
  262. //#define MBEDTLS_SSL_CIPHERSUITES MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,MBEDTLS_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
  263. #define MBEDTLS_X509_MAX_INTERMEDIATE_CA 3 /**< Maximum number of intermediate CAs in a verification chain. */
  264. //#define MBEDTLS_X509_MAX_FILE_PATH_LEN 512 /**< Maximum length of a path/filename string in bytes including the null terminator character ('\0'). */