Some Enterprise Authentication Servers do not support TLS v1.2. Move this option to Menuconfig and disable by default.
@@ -112,6 +112,5 @@ target_compile_definitions(${COMPONENT_LIB} PRIVATE
CONFIG_ECC
CONFIG_IEEE80211W
CONFIG_WPA3_SAE
- CONFIG_TLSV12
CONFIG_SHA256
)
@@ -6,4 +6,10 @@ menu "Supplicant"
help
Select this option to use MbedTLS crypto API's which utilize hardware acceleration.
+ config WPA_TLS_V12
+ bool "Enable TLS v1.2"
+ default n
+ help
+ Select this to enable TLS v1.2 for WPA2-Enterprise Authentication.
+
endmenu
@@ -21,4 +21,8 @@
#define USE_MBEDTLS_CRYPTO 1
#endif
+#if CONFIG_WPA_TLS_V12
+#define CONFIG_TLSV12
+#endif
#endif /* _SUPPLICANT_OPT_H */