blob: 342bbed91e6dec699e62929eb4583341b7d54786 [file] [log] [blame]
Jerry Yuda5af222021-12-24 18:45:45 +08001/* MBEDTLS_USER_CONFIG_FILE for testing.
2 * Only used for a few test configurations.
3 *
4 * Typical usage (note multiple levels of quoting):
5 * make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
6 */
7
8/*
9 * Copyright The Mbed TLS Contributors
Dave Rodgman16799db2023-11-02 19:47:20 +000010 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
Jerry Yuda5af222021-12-24 18:45:45 +080011 */
Jerry Yu81d5e1f2022-01-27 13:01:01 +080012
Gilles Peskine4bb369c2022-10-29 17:44:19 +020013/* Enable TLS 1.3 and core 1.3 features */
Jerry Yu63319092022-01-28 10:22:45 +080014#define MBEDTLS_SSL_PROTO_TLS1_3
15#define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
16
Gilles Peskine4bb369c2022-10-29 17:44:19 +020017/* Disable TLS 1.2 and 1.2-specific features */
Jerry Yuda5af222021-12-24 18:45:45 +080018#undef MBEDTLS_SSL_ENCRYPT_THEN_MAC
Jerry Yuda5af222021-12-24 18:45:45 +080019#undef MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Gilles Peskine7d3186d2022-08-12 22:43:18 +020020#undef MBEDTLS_SSL_RENEGOTIATION
Jerry Yuda5af222021-12-24 18:45:45 +080021#undef MBEDTLS_SSL_PROTO_TLS1_2
Jerry Yuda5af222021-12-24 18:45:45 +080022#undef MBEDTLS_SSL_PROTO_DTLS
Jerry Yuda5af222021-12-24 18:45:45 +080023#undef MBEDTLS_SSL_DTLS_ANTI_REPLAY
Jerry Yuda5af222021-12-24 18:45:45 +080024#undef MBEDTLS_SSL_DTLS_HELLO_VERIFY
Gilles Peskine136d25c2022-08-12 22:49:12 +020025#undef MBEDTLS_SSL_DTLS_SRTP
Jerry Yuda5af222021-12-24 18:45:45 +080026#undef MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
Dave Rodgman4e0fca32022-10-27 09:47:21 +010027#undef MBEDTLS_SSL_DTLS_CONNECTION_ID
28#undef MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT