package/libs/mbedtls/patches/200-config.patch

   1 --- a/include/mbedtls/config.h
   2 +++ b/include/mbedtls/config.h
   3 @@ -191,7 +191,7 @@
   4   *
   5   * Uncomment to get errors on using deprecated functions.
   6   */
   7 -//#define MBEDTLS_DEPRECATED_REMOVED
   8 +#define MBEDTLS_DEPRECATED_REMOVED
   9
  10  /* \} name SECTION: System support */
  11
  12 @@ -347,7 +347,7 @@
  13   *
  14   * Enable Cipher Feedback mode (CFB) for symmetric ciphers.
  15   */
  16 -#define MBEDTLS_CIPHER_MODE_CFB
  17 +//#define MBEDTLS_CIPHER_MODE_CFB
  18
  19  /**
  20   * \def MBEDTLS_CIPHER_MODE_CTR
  21 @@ -441,13 +441,13 @@
  22   *
  23   * Comment macros to disable the curve and functions for it
  24   */
  25 -#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
  26 -#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
  27 +//#define MBEDTLS_ECP_DP_SECP192R1_ENABLED
  28 +//#define MBEDTLS_ECP_DP_SECP224R1_ENABLED
  29  #define MBEDTLS_ECP_DP_SECP256R1_ENABLED
  30  #define MBEDTLS_ECP_DP_SECP384R1_ENABLED
  31  #define MBEDTLS_ECP_DP_SECP521R1_ENABLED
  32 -#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
  33 -#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
  34 +//#define MBEDTLS_ECP_DP_SECP192K1_ENABLED
  35 +//#define MBEDTLS_ECP_DP_SECP224K1_ENABLED
  36  #define MBEDTLS_ECP_DP_SECP256K1_ENABLED
  37  #define MBEDTLS_ECP_DP_BP256R1_ENABLED
  38  #define MBEDTLS_ECP_DP_BP384R1_ENABLED
  39 @@ -476,8 +476,8 @@
  40   * Requires: MBEDTLS_HMAC_DRBG_C
  41   *
  42   * Comment this macro to disable deterministic ECDSA.
  43 - */
  44  #define MBEDTLS_ECDSA_DETERMINISTIC
  45 + */
  46
  47  /**
  48   * \def MBEDTLS_KEY_EXCHANGE_PSK_ENABLED
  49 @@ -523,7 +523,7 @@
  50   *      MBEDTLS_TLS_DHE_PSK_WITH_3DES_EDE_CBC_SHA
  51   *      MBEDTLS_TLS_DHE_PSK_WITH_RC4_128_SHA
  52   */
  53 -#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
  54 +//#define MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED
  55
  56  /**
  57   * \def MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
  58 @@ -542,8 +542,8 @@
  59   *      MBEDTLS_TLS_ECDHE_PSK_WITH_CAMELLIA_128_CBC_SHA256
  60   *      MBEDTLS_TLS_ECDHE_PSK_WITH_3DES_EDE_CBC_SHA
  61   *      MBEDTLS_TLS_ECDHE_PSK_WITH_RC4_128_SHA
  62 - */
  63  #define MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
  64 + */
  65
  66  /**
  67   * \def MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
  68 @@ -568,7 +568,7 @@
  69   *      MBEDTLS_TLS_RSA_PSK_WITH_3DES_EDE_CBC_SHA
  70   *      MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
  71   */
  72 -#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
  73 +//#define MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
  74
  75  /**
  76   * \def MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
  77 @@ -622,7 +622,7 @@
  78   *      MBEDTLS_TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
  79   *      MBEDTLS_TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
  80   */
  81 -#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
  82 +//#define MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED
  83
  84  /**
  85   * \def MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
  86 @@ -695,7 +695,7 @@
  87   *      MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_128_GCM_SHA256
  88   *      MBEDTLS_TLS_ECDH_ECDSA_WITH_CAMELLIA_256_GCM_SHA384
  89   */
  90 -#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
  91 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
  92
  93  /**
  94   * \def MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
  95 @@ -719,7 +719,7 @@
  96   *      MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_128_GCM_SHA256
  97   *      MBEDTLS_TLS_ECDH_RSA_WITH_CAMELLIA_256_GCM_SHA384
  98   */
  99 -#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
 100 +//#define MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
 101
 102  /**
 103   * \def MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
 104 @@ -885,7 +885,7 @@
 105   *
 106   * Comment this macro to disable support for external private RSA keys.
 107   */
 108 -#define MBEDTLS_PK_RSA_ALT_SUPPORT
 109 +//#define MBEDTLS_PK_RSA_ALT_SUPPORT
 110
 111  /**
 112   * \def MBEDTLS_PKCS1_V15
 113 @@ -917,14 +917,14 @@
 114   * Uncomment this macro to disable the use of CRT in RSA.
 115   *
 116   */
 117 -//#define MBEDTLS_RSA_NO_CRT
 118 +#define MBEDTLS_RSA_NO_CRT
 119
 120  /**
 121   * \def MBEDTLS_SELF_TEST
 122   *
 123   * Enable the checkup functions (*_self_test).
 124   */
 125 -#define MBEDTLS_SELF_TEST
 126 +//#define MBEDTLS_SELF_TEST
 127
 128  /**
 129   * \def MBEDTLS_SHA256_SMALLER
 130 @@ -940,7 +940,7 @@
 131   *
 132   * Uncomment to enable the smaller implementation of SHA256.
 133   */
 134 -//#define MBEDTLS_SHA256_SMALLER
 135 +#define MBEDTLS_SHA256_SMALLER
 136
 137  /**
 138   * \def MBEDTLS_SSL_ALL_ALERT_MESSAGES
 139 @@ -1234,8 +1234,8 @@
 140   * callbacks are provided by MBEDTLS_SSL_TICKET_C.
 141   *
 142   * Comment this macro to disable support for SSL session tickets
 143 - */
 144  #define MBEDTLS_SSL_SESSION_TICKETS
 145 + */
 146
 147  /**
 148   * \def MBEDTLS_SSL_EXPORT_KEYS
 149 @@ -1265,7 +1265,7 @@
 150   *
 151   * Comment this macro to disable support for truncated HMAC in SSL
 152   */
 153 -#define MBEDTLS_SSL_TRUNCATED_HMAC
 154 +//#define MBEDTLS_SSL_TRUNCATED_HMAC
 155
 156  /**
 157   * \def MBEDTLS_THREADING_ALT
 158 @@ -1299,8 +1299,8 @@
 159   * Requires: MBEDTLS_VERSION_C
 160   *
 161   * Comment this to disable run-time checking and save ROM space
 162 - */
 163  #define MBEDTLS_VERSION_FEATURES
 164 + */
 165
 166  /**
 167   * \def MBEDTLS_X509_ALLOW_EXTENSIONS_NON_V3
 168 @@ -1501,7 +1501,7 @@
 169   *      MBEDTLS_TLS_RSA_PSK_WITH_RC4_128_SHA
 170   *      MBEDTLS_TLS_PSK_WITH_RC4_128_SHA
 171   */
 172 -#define MBEDTLS_ARC4_C
 173 +//#define MBEDTLS_ARC4_C
 174
 175  /**
 176   * \def MBEDTLS_ASN1_PARSE_C
 177 @@ -1621,7 +1621,7 @@
 178   *      MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_GCM_SHA256
 179   *      MBEDTLS_TLS_PSK_WITH_CAMELLIA_128_CBC_SHA256
 180   */
 181 -#define MBEDTLS_CAMELLIA_C
 182 +//#define MBEDTLS_CAMELLIA_C
 183
 184  /**
 185   * \def MBEDTLS_CCM_C
 186 @@ -1635,7 +1635,7 @@
 187   * This module enables the AES-CCM ciphersuites, if other requisites are
 188   * enabled as well.
 189   */
 190 -#define MBEDTLS_CCM_C
 191 +//#define MBEDTLS_CCM_C
 192
 193  /**
 194   * \def MBEDTLS_CERTS_C
 195 @@ -1647,7 +1647,7 @@
 196   *
 197   * This module is used for testing (ssl_client/server).
 198   */
 199 -#define MBEDTLS_CERTS_C
 200 +//#define MBEDTLS_CERTS_C
 201
 202  /**
 203   * \def MBEDTLS_CIPHER_C
 204 @@ -1700,7 +1700,7 @@
 205   *
 206   * This module provides debugging functions.
 207   */
 208 -#define MBEDTLS_DEBUG_C
 209 +//#define MBEDTLS_DEBUG_C
 210
 211  /**
 212   * \def MBEDTLS_DES_C
 213 @@ -1880,8 +1880,8 @@
 214   * Requires: MBEDTLS_MD_C
 215   *
 216   * Uncomment to enable the HMAC_DRBG random number geerator.
 217 - */
 218  #define MBEDTLS_HMAC_DRBG_C
 219 + */
 220
 221  /**
 222   * \def MBEDTLS_MD_C
 223 @@ -2158,7 +2158,7 @@
 224   * Caller:  library/mbedtls_md.c
 225   *
 226   */
 227 -#define MBEDTLS_RIPEMD160_C
 228 +//#define MBEDTLS_RIPEMD160_C
 229
 230  /**
 231   * \def MBEDTLS_RSA_C
 232 @@ -2235,8 +2235,8 @@
 233   * Caller:
 234   *
 235   * Requires: MBEDTLS_SSL_CACHE_C
 236 - */
 237  #define MBEDTLS_SSL_CACHE_C
 238 + */
 239
 240  /**
 241   * \def MBEDTLS_SSL_COOKIE_C
 242 @@ -2257,8 +2257,8 @@
 243   * Caller:
 244   *
 245   * Requires: MBEDTLS_CIPHER_C
 246 - */
 247  #define MBEDTLS_SSL_TICKET_C
 248 + */
 249
 250  /**
 251   * \def MBEDTLS_SSL_CLI_C
 252 @@ -2357,8 +2357,8 @@
 253   * Module:  library/version.c
 254   *
 255   * This module provides run-time version information.
 256 - */
 257  #define MBEDTLS_VERSION_C
 258 + */
 259
 260  /**
 261   * \def MBEDTLS_X509_USE_C
 262 @@ -2468,7 +2468,7 @@
 263   * Module:  library/xtea.c
 264   * Caller:
 265   */
 266 -#define MBEDTLS_XTEA_C
 267 +//#define MBEDTLS_XTEA_C
 268
 269  /* \} name SECTION: mbed TLS modules */
 270