Selaa lähdekoodia

Add option to disable server side SSL session tickets as well as client

Closes https://github.com/espressif/esp-idf/pull/2570
Stephen Bird 7 vuotta sitten
vanhempi
sitoutus
058c6afd3c

+ 10 - 3
components/mbedtls/Kconfig

@@ -330,13 +330,20 @@ menu "mbedTLS"
         help
         help
             Disabling this option will save some code size if it is not needed.
             Disabling this option will save some code size if it is not needed.
 
 
-    config MBEDTLS_SSL_SESSION_TICKETS
-        bool "TLS: Support RFC 5077 SSL session tickets"
+    config MBEDTLS_CLIENT_SSL_SESSION_TICKETS
+        bool "TLS: Client Support for RFC 5077 SSL session tickets"
         default y
         default y
         depends on MBEDTLS_TLS_ENABLED
         depends on MBEDTLS_TLS_ENABLED
         help
         help
-            Support RFC 5077 session tickets. See mbedTLS documentation for more details.
+            Client support for RFC 5077 session tickets. See mbedTLS documentation for more details.
+            Disabling this option will save some code size.
 
 
+    config MBEDTLS_SERVER_SSL_SESSION_TICKETS
+        bool "TLS: Server Support for RFC 5077 SSL session tickets"
+        default y
+        depends on MBEDTLS_TLS_ENABLED
+        help
+            Server support for RFC 5077 session tickets. See mbedTLS documentation for more details.
             Disabling this option will save some code size.
             Disabling this option will save some code size.
 
 
     menu "Symmetric Ciphers"
     menu "Symmetric Ciphers"

+ 3 - 1
components/mbedtls/port/include/mbedtls/esp_config.h

@@ -1308,7 +1308,7 @@
  *
  *
  * Comment this macro to disable support for SSL session tickets
  * Comment this macro to disable support for SSL session tickets
  */
  */
-#ifdef CONFIG_MBEDTLS_SSL_SESSION_TICKETS
+#ifdef CONFIG_MBEDTLS_CLIENT_SSL_SESSION_TICKETS
 #define MBEDTLS_SSL_SESSION_TICKETS
 #define MBEDTLS_SSL_SESSION_TICKETS
 #endif
 #endif
 
 
@@ -2340,7 +2340,9 @@
  *
  *
  * Requires: MBEDTLS_CIPHER_C
  * Requires: MBEDTLS_CIPHER_C
  */
  */
+#ifdef CONFIG_MBEDTLS_SERVER_SSL_SESSION_TICKETS
 #define MBEDTLS_SSL_TICKET_C
 #define MBEDTLS_SSL_TICKET_C
+#endif
 
 
 /**
 /**
  * \def MBEDTLS_SSL_CLI_C
  * \def MBEDTLS_SSL_CLI_C