| Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 1 | /* MBEDTLS_USER_CONFIG_FILE for testing. |
| 2 | * Only used for a few test configurations. |
| 3 | * |
| 4 | * Typical usage (note multiple levels of quoting): |
| 5 | * make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'" |
| 6 | */ |
| 7 | |
| 8 | /* |
| 9 | * Copyright The Mbed TLS Contributors |
| 10 | * SPDX-License-Identifier: Apache-2.0 |
| 11 | * |
| 12 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 13 | * not use this file except in compliance with the License. |
| 14 | * You may obtain a copy of the License at |
| 15 | * |
| 16 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 17 | * |
| 18 | * Unless required by applicable law or agreed to in writing, software |
| 19 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 20 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 21 | * See the License for the specific language governing permissions and |
| 22 | * limitations under the License. |
| 23 | */ |
| Jerry Yu | 81d5e1f | 2022-01-27 13:01:01 +0800 | [diff] [blame] | 24 | |
| Gilles Peskine | 4bb369c | 2022-10-29 17:44:19 +0200 | [diff] [blame] | 25 | /* Enable TLS 1.3 and core 1.3 features */ |
| Jerry Yu | 6331909 | 2022-01-28 10:22:45 +0800 | [diff] [blame] | 26 | #define MBEDTLS_SSL_PROTO_TLS1_3 |
| 27 | #define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
| 28 | |
| Gilles Peskine | 4bb369c | 2022-10-29 17:44:19 +0200 | [diff] [blame] | 29 | /* Disable TLS 1.2 and 1.2-specific features */ |
| Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 30 | #undef MBEDTLS_SSL_ENCRYPT_THEN_MAC |
| Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 31 | #undef MBEDTLS_SSL_EXTENDED_MASTER_SECRET |
| Gilles Peskine | 7d3186d | 2022-08-12 22:43:18 +0200 | [diff] [blame] | 32 | #undef MBEDTLS_SSL_RENEGOTIATION |
| Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 33 | #undef MBEDTLS_SSL_PROTO_TLS1_2 |
| Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 34 | #undef MBEDTLS_SSL_PROTO_DTLS |
| Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 35 | #undef MBEDTLS_SSL_DTLS_ANTI_REPLAY |
| Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 36 | #undef MBEDTLS_SSL_DTLS_HELLO_VERIFY |
| Gilles Peskine | 136d25c | 2022-08-12 22:49:12 +0200 | [diff] [blame] | 37 | #undef MBEDTLS_SSL_DTLS_SRTP |
| Jerry Yu | da5af22 | 2021-12-24 18:45:45 +0800 | [diff] [blame] | 38 | #undef MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE |
| Dave Rodgman | 4e0fca3 | 2022-10-27 09:47:21 +0100 | [diff] [blame] | 39 | #undef MBEDTLS_SSL_DTLS_CONNECTION_ID |
| 40 | #undef MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT |
| Gilles Peskine | 4bb369c | 2022-10-29 17:44:19 +0200 | [diff] [blame] | 41 | |
| 42 | /* Enable some invasive tests */ |
| 43 | #define MBEDTLS_TEST_HOOKS |