Explorar o código

wpa_supplicant: Disable TLSv1.2 by default

Some Enterprise Authentication Servers do not support TLS v1.2.
Move this option to Menuconfig and disable by default.
Nachiket Kukade %!s(int64=5) %!d(string=hai) anos
pai
achega
6254bf443e

+ 0 - 1
components/wpa_supplicant/CMakeLists.txt

@@ -112,6 +112,5 @@ target_compile_definitions(${COMPONENT_LIB} PRIVATE
     CONFIG_ECC
     CONFIG_IEEE80211W
     CONFIG_WPA3_SAE
-    CONFIG_TLSV12
     CONFIG_SHA256
     )

+ 6 - 0
components/wpa_supplicant/Kconfig

@@ -6,4 +6,10 @@ menu "Supplicant"
         help
             Select this option to use MbedTLS crypto API's which utilize hardware acceleration.
 
+    config WPA_TLS_V12
+        bool "Enable TLS v1.2"
+        default n
+        help
+            Select this to enable TLS v1.2 for WPA2-Enterprise Authentication.
+
 endmenu

+ 4 - 0
components/wpa_supplicant/port/include/supplicant_opt.h

@@ -21,4 +21,8 @@
 #define USE_MBEDTLS_CRYPTO 1
 #endif
 
+#if CONFIG_WPA_TLS_V12
+#define CONFIG_TLSV12
+#endif
+
 #endif /* _SUPPLICANT_OPT_H */