OrgZephyr/zephyr
OrgZephyr
/
zephyr
mirror of https://github.com/zephyrproject-rtos/zephyr.git
1
0
Fork 0
Code Issues Releases Wiki Activity
zephyr/samples/net/mqtt_publisher/prj_frdm_k64f_tls.conf

46 lines
951 B
Plaintext
Raw Normal View History

net/mqtt: Enable TLS support CONFIG_MQTT_LIB_TLS is introduced to enable TLS support. Also, prj_frdm_k64f_tls.conf is added to demostrate the whole idea. jira:ZEP-2261 Signed-off-by: Aska Wu <aska.wu@linaro.org>
2017-07-10 18:18:06 +08:00
CONFIG_NETWORKING=y
CONFIG_NET_TCP=y
drivers: Rename `random` to `entropy` This should clear up some of the confusion with random number generators and drivers that obtain entropy from the hardware. Also, many hardware number generators have limited bandwidth, so it's natural for their output to be only used for seeding a random number generator. Signed-off-by: Leandro Pereira <leandro.pereira@intel.com>
2017-10-14 07:30:55 +08:00
CONFIG_ENTROPY_GENERATOR=y
net/mqtt: Enable TLS support CONFIG_MQTT_LIB_TLS is introduced to enable TLS support. Also, prj_frdm_k64f_tls.conf is added to demostrate the whole idea. jira:ZEP-2261 Signed-off-by: Aska Wu <aska.wu@linaro.org>
2017-07-10 18:18:06 +08:00
CONFIG_NET_ARP=y
CONFIG_NET_L2_ETHERNET=y
CONFIG_NET_LOG=y
CONFIG_INIT_STACKS=y
CONFIG_NET_PKT_RX_COUNT=16
CONFIG_NET_PKT_TX_COUNT=16
CONFIG_NET_BUF_RX_COUNT=16
CONFIG_NET_BUF_TX_COUNT=16
CONFIG_NET_IPV6_RA_RDNSS=y
CONFIG_NET_IF_UNICAST_IPV4_ADDR_COUNT=3
CONFIG_PRINTK=y
#CONFIG_NET_DEBUG_NET_PKT=y
CONFIG_NET_IPV4=n
# Enable IPv6 support
CONFIG_NET_IPV6=y
# Enable the MQTT Lib
CONFIG_MQTT_LIB=y
CONFIG_MQTT_LIB_TLS=y
CONFIG_NET_APP_SETTINGS=y
CONFIG_NET_APP_MY_IPV6_ADDR="2001:db8::1"
CONFIG_NET_APP_PEER_IPV6_ADDR="2001:db8::2"
CONFIG_NET_APP_MY_IPV4_ADDR="192.168.1.101"
CONFIG_NET_APP_PEER_IPV4_ADDR="192.168.1.10"
CONFIG_MAIN_STACK_SIZE=2048
# For IPv6
CONFIG_NET_BUF_DATA_SIZE=256
CONFIG_MBEDTLS=y
CONFIG_MBEDTLS_BUILTIN=y
mbedtls: Add CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN This value allows to set max payload length of a TLS protocol message, and passed thru to mbedTLS as MBEDTLS_SSL_MAX_CONTENT_LEN setting. The only safe value is 16384, which translates to 32KB of RAM required just for mbedTLS input/output buffers. Any other value can be configured *only* per a particular application (e.g. knowing that it won't pass more than spefific amount of data at once and/or won't connect to a server with a long cert chain). Previosuly, we had quite an adhoc and inflexible config with random values for that setting, based on protocol. Note that while the safe value is 16384, "backward compatible" default of 1500 is used (good for DTLS on the other hand). Signed-off-by: Paul Sokolovsky <paul.sokolovsky@linaro.org>
2018-03-01 06:00:29 +08:00
CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=2500
net/mqtt: Enable TLS support CONFIG_MQTT_LIB_TLS is introduced to enable TLS support. Also, prj_frdm_k64f_tls.conf is added to demostrate the whole idea. jira:ZEP-2261 Signed-off-by: Aska Wu <aska.wu@linaro.org>
2017-07-10 18:18:06 +08:00
CONFIG_MBEDTLS_ENABLE_HEAP=y
CONFIG_MBEDTLS_HEAP_SIZE=30000
CONFIG_MBEDTLS_CFG_FILE="config-mini-tls1_2.h"