27 lines
821 B
Plaintext
27 lines
821 B
Plaintext
CONFIG_THRIFT_SSL_SOCKET=y
|
|
|
|
# Currenty, in Zephyr's MBedTLS IPPROTO_TLS_1_0 implementation, 2 sockets are
|
|
# needed for every connection.
|
|
#
|
|
# Additionally, upstream Apache Thrift uses socketpair for cancellation rather
|
|
# than eventfd, since the latter is not portable to some operating systems.
|
|
#
|
|
# File Descriptor Usage
|
|
# ---------------------
|
|
# stdin, stdout, stderr: 3
|
|
# tcp socket (accept): 1
|
|
# tls socket (accept): 1
|
|
# tcp sockets (client, server): 2
|
|
# tls sockets (client, server): 2
|
|
# socketpairs for cancellation (accept, client, server): 6
|
|
CONFIG_POSIX_MAX_FDS=15
|
|
|
|
# TLS configuration
|
|
CONFIG_MBEDTLS=y
|
|
CONFIG_MBEDTLS_PEM_CERTIFICATE_FORMAT=y
|
|
CONFIG_MBEDTLS_ENABLE_HEAP=y
|
|
CONFIG_MBEDTLS_HEAP_SIZE=48000
|
|
CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=2048
|
|
CONFIG_NET_SOCKETS_TLS_MAX_CONTEXTS=6
|
|
CONFIG_NET_SOCKETS_SOCKOPT_TLS=y
|