CONFIG_THRIFT_SSL_SOCKET=y

# Currenty, in Zephyr's MBedTLS IPPROTO_TLS_1_0 implementation, 2 sockets are
# needed for every connection.
#
# Additionally, upstream Apache Thrift uses socketpair for cancellation rather
# than eventfd, since the latter is not portable to some operating systems.
#
# File Descriptor Usage
# ---------------------
# stdin, stdout, stderr: 3
# tcp socket (accept): 1
# tls socket (accept): 1
# tcp sockets (client, server): 2
# tls sockets (client, server): 2
# socketpairs for cancellation (accept, client, server): 6
CONFIG_ZVFS_OPEN_MAX=15

# TLS configuration
CONFIG_MBEDTLS=y
CONFIG_MBEDTLS_PEM_CERTIFICATE_FORMAT=y
CONFIG_MBEDTLS_ENABLE_HEAP=y
CONFIG_MBEDTLS_HEAP_SIZE=48000
CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=2048
CONFIG_NET_SOCKETS_TLS_MAX_CONTEXTS=6
CONFIG_NET_SOCKETS_SOCKOPT_TLS=y