mirror of
https://github.com/espressif/esp-idf.git
synced 2024-10-05 20:47:46 -04:00
de22f3a4e5
Add configuration option to fallback to software implementation for exponential mod incase of hardware is not supporting it for larger MPI value. Usecase: ESP32C3 only supports till RSA3072 in hardware. This config option will help to support 4k certificates for WPA enterprise connection.
86 lines
2.6 KiB
Makefile
86 lines
2.6 KiB
Makefile
#
|
|
# Component Makefile
|
|
#
|
|
|
|
|
|
COMPONENT_ADD_INCLUDEDIRS := port/include mbedtls/include esp_crt_bundle/include
|
|
|
|
COMPONENT_SRCDIRS := mbedtls/library port port/$(IDF_TARGET) port/sha port/sha/parallel_engine port/aes port/aes/block esp_crt_bundle
|
|
|
|
COMPONENT_OBJEXCLUDE := mbedtls/library/net_sockets.o
|
|
|
|
COMPONENT_SUBMODULES += mbedtls
|
|
|
|
|
|
# Note: some mbedTLS hardware acceleration can be enabled/disabled by config.
|
|
#
|
|
# We don't need to exclude aes.o as these functions use a different prefix (esp_aes_x) and the
|
|
# config option only changes the prefixes in the header so mbedtls_aes_x compiles to esp_aes_x
|
|
#
|
|
# The other port-specific files don't override internal mbedTLS functions, they just add new functions.
|
|
|
|
ifndef CONFIG_MBEDTLS_HARDWARE_MPI
|
|
COMPONENT_OBJEXCLUDE += port/esp_bignum.o port/$(IDF_TARGET)/bignum.o
|
|
endif
|
|
|
|
|
|
|
|
ifndef CONFIG_MBEDTLS_HARDWARE_SHA
|
|
COMPONENT_OBJEXCLUDE += port/parallel_engine/esp_sha1.o port/parallel_engine/esp_sha256.o port/parallel_engine/esp_sha512.o
|
|
endif
|
|
|
|
ifdef CONFIG_MBEDTLS_CERTIFICATE_BUNDLE
|
|
|
|
GEN_CRT_BUNDLEPY := $(PYTHON) $(COMPONENT_PATH)/esp_crt_bundle/gen_crt_bundle.py
|
|
DEFAULT_CRT_DIR := ${COMPONENT_PATH}/esp_crt_bundle
|
|
X509_CERTIFICATE_BUNDLE := $(abspath x509_crt_bundle)
|
|
CUSTOM_BUNDLE_PATH := $(PROJECT_PATH)/$(CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE_PATH)
|
|
|
|
ifdef CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE
|
|
CRT_PATHS += $(CUSTOM_BUNDLE_PATH)
|
|
endif
|
|
|
|
ifdef CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL
|
|
CRT_PATHS += ${DEFAULT_CRT_DIR}/cacrt_all.pem
|
|
endif
|
|
|
|
ifdef CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_CMN
|
|
CRT_PATHS += ${DEFAULT_CRT_DIR}/cacrt_all.pem
|
|
ARGS += --filter ${DEFAULT_CRT_DIR}/cmn_crt_authorities.csv
|
|
endif
|
|
|
|
ARGS += --input $(CRT_PATHS) -q
|
|
|
|
# Generate certificate bundle using generate_cert_bundle.py
|
|
$(X509_CERTIFICATE_BUNDLE) : $(SDKCONFIG_MAKEFILE)
|
|
$(GEN_CRT_BUNDLEPY) $(ARGS)
|
|
|
|
COMPONENT_EXTRA_CLEAN += $(X509_CERTIFICATE_BUNDLE)
|
|
|
|
COMPONENT_EMBED_FILES := $(X509_CERTIFICATE_BUNDLE)
|
|
|
|
endif
|
|
|
|
ifdef CONFIG_MBEDTLS_DYNAMIC_BUFFER
|
|
WRAP_FUNCTIONS = mbedtls_ssl_handshake_client_step \
|
|
mbedtls_ssl_handshake_server_step \
|
|
mbedtls_ssl_read \
|
|
mbedtls_ssl_write \
|
|
mbedtls_ssl_session_reset \
|
|
mbedtls_ssl_free \
|
|
mbedtls_ssl_setup \
|
|
mbedtls_ssl_send_alert_message \
|
|
mbedtls_ssl_close_notify
|
|
|
|
COMPONENT_SRCDIRS += port/dynamic
|
|
endif
|
|
|
|
ifdef CONFIG_MBEDTLS_HARDWARE_MPI
|
|
WRAP_FUNCTIONS += mbedtls_mpi_exp_mod
|
|
endif
|
|
|
|
ifneq ($(origin WRAP_FUNCTIONS),undefined)
|
|
WRAP_ARGUMENT := -Wl,--wrap=
|
|
COMPONENT_ADD_LDFLAGS = -l$(COMPONENT_NAME) $(addprefix $(WRAP_ARGUMENT),$(WRAP_FUNCTIONS))
|
|
endif
|