mbedtls: cleanup config patch
[openwrt/staging/wigyori.git] / package / libs / mbedtls / patches / 200-config.patch
1 --- a/include/mbedtls/config.h
2 +++ b/include/mbedtls/config.h
3 @@ -599,19 +599,19 @@
4 *
5 * Comment macros to disable the curve and functions for it
6 */
7 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
8 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
9 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
10 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
11 #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
12 #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
13 -#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
14 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
15 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
16 +//#define MBEDTLS_ECP_DP_SECP521R1_ENABLED
17 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
18 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
19 #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
20 -#define MBEDTLS_ECP_DP_BP256R1_ENABLED
21 -#define MBEDTLS_ECP_DP_BP384R1_ENABLED
22 -#define MBEDTLS_ECP_DP_BP512R1_ENABLED
23 +//#define MBEDTLS_ECP_DP_BP256R1_ENABLED
24 +//#define MBEDTLS_ECP_DP_BP384R1_ENABLED
25 +//#define MBEDTLS_ECP_DP_BP512R1_ENABLED
26 #define MBEDTLS_ECP_DP_CURVE25519_ENABLED
27 -#define MBEDTLS_ECP_DP_CURVE448_ENABLED
28 +//#define MBEDTLS_ECP_DP_CURVE448_ENABLED
29
30 /**
31 * \def MBEDTLS_ECP_NIST_OPTIM
32 @@ -636,7 +636,7 @@
33 *
34 * Comment this macro to disable deterministic ECDSA.
35 */
36 -#define MBEDTLS_ECDSA_DETERMINISTIC
37 +//#define MBEDTLS_ECDSA_DETERMINISTIC
38
39 /**
40 * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
41 @@ -689,7 +689,7 @@
42 * See dhm.h for more details.
43 *
44 */
45 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
46 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
47
48 /**
49 * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
50 @@ -709,7 +709,7 @@
51 * MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
52 * MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
53 */
54 -#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
55 +//#define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
56
57 /**
58 * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
59 @@ -734,7 +734,7 @@
60 * MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
61 * MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
62 */
63 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
64 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
65
66 /**
67 * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
68 @@ -868,7 +868,7 @@
69 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
70 * MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
71 */
72 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
73 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
74
75 /**
76 * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
77 @@ -892,7 +892,7 @@
78 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
79 * MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
80 */
81 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
82 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
83
84 /**
85 * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
86 @@ -996,7 +996,7 @@
87 * This option is only useful if both MBEDTLS_SHA256_C and
88 * MBEDTLS_SHA512_C are defined. Otherwise the available hash module is used.
89 */
90 -//#define MBEDTLS_ENTROPY_FORCE_SHA256
91 +#define MBEDTLS_ENTROPY_FORCE_SHA256
92
93 /**
94 * \def MBEDTLS_ENTROPY_NV_SEED
95 @@ -1091,14 +1091,14 @@
96 * Uncomment this macro to disable the use of CRT in RSA.
97 *
98 */
99 -//#define MBEDTLS_RSA_NO_CRT
100 +#define MBEDTLS_RSA_NO_CRT
101
102 /**
103 * \def MBEDTLS_SELF_TEST
104 *
105 * Enable the checkup functions (*_self_test).
106 */
107 -#define MBEDTLS_SELF_TEST
108 +//#define MBEDTLS_SELF_TEST
109
110 /**
111 * \def MBEDTLS_SHA256_SMALLER
112 @@ -1114,7 +1114,7 @@
113 *
114 * Uncomment to enable the smaller implementation of SHA256.
115 */
116 -//#define MBEDTLS_SHA256_SMALLER
117 +#define MBEDTLS_SHA256_SMALLER
118
119 /**
120 * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
121 @@ -1241,7 +1241,7 @@
122 * configuration of this extension).
123 *
124 */
125 -#define MBEDTLS_SSL_RENEGOTIATION
126 +//#define MBEDTLS_SSL_RENEGOTIATION
127
128 /**
129 * \def MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO
130 @@ -1416,7 +1416,7 @@
131 *
132 * Comment this macro to disable support for SSL session tickets
133 */
134 -#define MBEDTLS_SSL_SESSION_TICKETS
135 +//#define MBEDTLS_SSL_SESSION_TICKETS
136
137 /**
138 * \def MBEDTLS_SSL_EXPORT_KEYS
139 @@ -1446,7 +1446,7 @@
140 *
141 * Comment this macro to disable support for truncated HMAC in SSL
142 */
143 -#define MBEDTLS_SSL_TRUNCATED_HMAC
144 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
145
146 /**
147 * \def MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT
148 @@ -1505,7 +1505,7 @@
149 *
150 * Comment this to disable run-time checking and save ROM space
151 */
152 -#define MBEDTLS_VERSION_FEATURES
153 +//#define MBEDTLS_VERSION_FEATURES
154
155 /**
156 * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
157 @@ -1835,7 +1835,7 @@
158 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
159 * MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
160 */
161 -#define MBEDTLS_CAMELLIA_C
162 +//#define MBEDTLS_CAMELLIA_C
163
164 /**
165 * \def MBEDTLS_CCM_C
166 @@ -1849,7 +1849,7 @@
167 * This module enables the AES-CCM ciphersuites, if other requisites are
168 * enabled as well.
169 */
170 -#define MBEDTLS_CCM_C
171 +//#define MBEDTLS_CCM_C
172
173 /**
174 * \def MBEDTLS_CERTS_C
175 @@ -1861,7 +1861,7 @@
176 *
177 * This module is used for testing (ssl_client/server).
178 */
179 -#define MBEDTLS_CERTS_C
180 +//#define MBEDTLS_CERTS_C
181
182 /**
183 * \def MBEDTLS_CIPHER_C
184 @@ -1914,7 +1914,7 @@
185 *
186 * This module provides debugging functions.
187 */
188 -#define MBEDTLS_DEBUG_C
189 +//#define MBEDTLS_DEBUG_C
190
191 /**
192 * \def MBEDTLS_DES_C
193 @@ -1943,7 +1943,7 @@
194 * \warning DES is considered a weak cipher and its use constitutes a
195 * security risk. We recommend considering stronger ciphers instead.
196 */
197 -#define MBEDTLS_DES_C
198 +//#define MBEDTLS_DES_C
199
200 /**
201 * \def MBEDTLS_DHM_C
202 @@ -2105,7 +2105,7 @@
203 *
204 * Uncomment to enable the HMAC_DRBG random number geerator.
205 */
206 -#define MBEDTLS_HMAC_DRBG_C
207 +//#define MBEDTLS_HMAC_DRBG_C
208
209 /**
210 * \def MBEDTLS_MD_C
211 @@ -2388,7 +2388,7 @@
212 *
213 * This module enables abstraction of common (libc) functions.
214 */
215 -#define MBEDTLS_PLATFORM_C
216 +//#define MBEDTLS_PLATFORM_C
217
218 /**
219 * \def MBEDTLS_RIPEMD160_C
220 @@ -2399,7 +2399,7 @@
221 * Caller: library/md.c
222 *
223 */
224 -#define MBEDTLS_RIPEMD160_C
225 +//#define MBEDTLS_RIPEMD160_C
226
227 /**
228 * \def MBEDTLS_RSA_C
229 @@ -2506,7 +2506,7 @@
230 *
231 * Requires: MBEDTLS_CIPHER_C
232 */
233 -#define MBEDTLS_SSL_TICKET_C
234 +//#define MBEDTLS_SSL_TICKET_C
235
236 /**
237 * \def MBEDTLS_SSL_CLI_C
238 @@ -2606,7 +2606,7 @@
239 *
240 * This module provides run-time version information.
241 */
242 -#define MBEDTLS_VERSION_C
243 +//#define MBEDTLS_VERSION_C
244
245 /**
246 * \def MBEDTLS_X509_USE_C
247 @@ -2716,7 +2716,7 @@
248 * Module: library/xtea.c
249 * Caller:
250 */
251 -#define MBEDTLS_XTEA_C
252 +//#define MBEDTLS_XTEA_C
253
254 /* \} name SECTION: mbed TLS modules */
255