7bd0711e2c265e1cae7b2d2e2bada77362f5f243
[openwrt/openwrt.git] / package / libs / mbedtls / patches / 200-config.patch
1 --- a/include/mbedtls/config.h
2 +++ b/include/mbedtls/config.h
3 @@ -599,19 +599,19 @@
4 *
5 * Comment macros to disable the curve and functions for it
6 */
7 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
8 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
9 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
10 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
11 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
12 #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
13 -#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
14 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
15 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
16 +//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
17 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
18 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
19 #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
20 -#define MBEDTLS_ECP_DP_BP256R1_ENABLED
21 -#define MBEDTLS_ECP_DP_BP384R1_ENABLED
22 -#define MBEDTLS_ECP_DP_BP512R1_ENABLED
23 +//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
24 +//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
25 +//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
26 #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
27 -#define MBEDTLS_ECP_DP_CURVE448_ENABLED
28 +//#define MBEDTLS_ECP_DP_CURVE448_ENABLED
29
30 /**
31 * \def MBEDTLS_ECP_NIST_OPTIM
32 @@ -635,8 +635,8 @@
33 * Requires: MBEDTLS_HMAC_DRBG_C
34 *
35 * Comment this macro to disable deterministic ECDSA.
36 - */
37 #define MBEDTLS_ECDSA_DETERMINISTIC
38 + */
39
40 /**
41 * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
42 @@ -689,7 +689,7 @@
43 * See dhm.h for more details.
44 *
45 */
46 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
47 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
48
49 /**
50 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
51 @@ -708,8 +708,8 @@
52 * MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
53 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
54 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
55 - */
56 #define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
57 + */
58
59 /**
60 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
61 @@ -734,7 +734,7 @@
62 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
63 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
64 */
65 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
66 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
67
68 /**
69 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
70 @@ -868,7 +868,7 @@
71 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
72 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
73 */
74 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
75 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
76
77 /**
78 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
79 @@ -892,7 +892,7 @@
80 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
81 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
82 */
83 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
84 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
85
86 /**
87 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
88 @@ -996,7 +996,7 @@
89 * This option is only useful if both MBEDTLS_SHA256_C and
90 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
91 */
92 -//#define MBEDTLS_ENTROPY_FORCE_SHA256
93 +#define MBEDTLS_ENTROPY_FORCE_SHA256
94
95 /**
96 * \def MBEDTLS_ENTROPY_NV_SEED
97 @@ -1091,14 +1091,14 @@
98 * Uncomment this macro to disable the use of CRT in RSA.
99 *
100 */
101 -//#define MBEDTLS_RSA_NO_CRT
102 +#define MBEDTLS_RSA_NO_CRT
103
104 /**
105 * \def MBEDTLS_SELF_TEST
106 *
107 * Enable the checkup functions (*_self_test).
108 */
109 -#define MBEDTLS_SELF_TEST
110 +//#define MBEDTLS_SELF_TEST
111
112 /**
113 * \def MBEDTLS_SHA256_SMALLER
114 @@ -1114,7 +1114,7 @@
115 *
116 * Uncomment to enable the smaller implementation of SHA256.
117 */
118 -//#define MBEDTLS_SHA256_SMALLER
119 +#define MBEDTLS_SHA256_SMALLER
120
121 /**
122 * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
123 @@ -1241,7 +1241,7 @@
124 * configuration of this extension).
125 *
126 */
127 -#define MBEDTLS_SSL_RENEGOTIATION
128 +//#define MBEDTLS_SSL_RENEGOTIATION
129
130 /**
131 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
132 @@ -1415,8 +1415,8 @@
133 * callbacks are provided by MBEDTLS_SSL_TICKET_C.
134 *
135 * Comment this macro to disable support for SSL session tickets
136 - */
137 #define MBEDTLS_SSL_SESSION_TICKETS
138 + */
139
140 /**
141 * \def MBEDTLS_SSL_EXPORT_KEYS
142 @@ -1446,7 +1446,7 @@
143 *
144 * Comment this macro to disable support for truncated HMAC in SSL
145 */
146 -#define MBEDTLS_SSL_TRUNCATED_HMAC
147 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
148
149 /**
150 * \def MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT
151 @@ -1504,8 +1504,8 @@
152 * Requires: MBEDTLS_VERSION_C
153 *
154 * Comment this to disable run-time checking and save ROM space
155 - */
156 #define MBEDTLS_VERSION_FEATURES
157 + */
158
159 /**
160 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
161 @@ -1835,7 +1835,7 @@
162 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
163 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
164 */
165 -#define MBEDTLS_CAMELLIA_C
166 +//#define MBEDTLS_CAMELLIA_C
167
168 /**
169 * \def MBEDTLS_CCM_C
170 @@ -1849,7 +1849,7 @@
171 * This module enables the AES-CCM ciphersuites, if other requisites are
172 * enabled as well.
173 */
174 -#define MBEDTLS_CCM_C
175 +//#define MBEDTLS_CCM_C
176
177 /**
178 * \def MBEDTLS_CERTS_C
179 @@ -1861,7 +1861,7 @@
180 *
181 * This module is used for testing (ssl_client/server).
182 */
183 -#define MBEDTLS_CERTS_C
184 +//#define MBEDTLS_CERTS_C
185
186 /**
187 * \def MBEDTLS_CIPHER_C
188 @@ -1914,7 +1914,7 @@
189 *
190 * This module provides debugging functions.
191 */
192 -#define MBEDTLS_DEBUG_C
193 +//#define MBEDTLS_DEBUG_C
194
195 /**
196 * \def MBEDTLS_DES_C
197 @@ -1943,7 +1943,7 @@
198 * \warning DES is considered a weak cipher and its use constitutes a
199 * security risk. We recommend considering stronger ciphers instead.
200 */
201 -#define MBEDTLS_DES_C
202 +//#define MBEDTLS_DES_C
203
204 /**
205 * \def MBEDTLS_DHM_C
206 @@ -2104,8 +2104,8 @@
207 * Requires: MBEDTLS_MD_C
208 *
209 * Uncomment to enable the HMAC_DRBG random number geerator.
210 - */
211 #define MBEDTLS_HMAC_DRBG_C
212 + */
213
214 /**
215 * \def MBEDTLS_MD_C
216 @@ -2388,7 +2388,7 @@
217 *
218 * This module enables abstraction of common (libc) functions.
219 */
220 -#define MBEDTLS_PLATFORM_C
221 +//#define MBEDTLS_PLATFORM_C
222
223 /**
224 * \def MBEDTLS_RIPEMD160_C
225 @@ -2399,7 +2399,7 @@
226 * Caller: library/md.c
227 *
228 */
229 -#define MBEDTLS_RIPEMD160_C
230 +//#define MBEDTLS_RIPEMD160_C
231
232 /**
233 * \def MBEDTLS_RSA_C
234 @@ -2505,8 +2505,8 @@
235 * Caller:
236 *
237 * Requires: MBEDTLS_CIPHER_C
238 - */
239 #define MBEDTLS_SSL_TICKET_C
240 + */
241
242 /**
243 * \def MBEDTLS_SSL_CLI_C
244 @@ -2605,8 +2605,8 @@
245 * Module: library/version.c
246 *
247 * This module provides run-time version information.
248 - */
249 #define MBEDTLS_VERSION_C
250 + */
251
252 /**
253 * \def MBEDTLS_X509_USE_C
254 @@ -2716,7 +2716,7 @@
255 * Module: library/xtea.c
256 * Caller:
257 */
258 -#define MBEDTLS_XTEA_C
259 +//#define MBEDTLS_XTEA_C
260
261 /* \} name SECTION: mbed TLS modules */
262