Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity

docs(esp-tls): clarify caller owns the PSA key in esp_key_config_t

Browse Source 
(cherry picked from commit ed6f697ea8)
This commit is contained in:
Aditya Patwardhan
2026-07-09 11:17:03 +05:30
parent aa70f6de09
commit 2188d7b855
3 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/esp-tls/esp_tls.h
+6 -2
View File
@@ -161,7 +161,9 @@ typedef struct esp_tls_cfg {
const unsigned char *clientkey_pem_buf; /*!< Client key legacy name */ const unsigned char *clientkey_pem_buf; /*!< Client key legacy name */
}; };
const esp_key_config_t *client_key; /*!< Unified key config. Must remain valid for session lifetime */ const esp_key_config_t *client_key; /*!< Unified key config. Must remain valid for session lifetime.
Any PSA key referenced here remains owned by the caller; ESP-TLS does not
destroy it on cleanup, so the application must release it with psa_destroy_key(). */
union { union {
unsigned int clientkey_bytes; /*!< Size of client key pointed to by unsigned int clientkey_bytes; /*!< Size of client key pointed to by
@@ -315,7 +317,9 @@ typedef struct esp_tls_cfg_server {
const unsigned char *serverkey_pem_buf; /*!< Server key legacy name */ const unsigned char *serverkey_pem_buf; /*!< Server key legacy name */
}; };
const esp_key_config_t *server_key; /*!< Unified key config. Must remain valid for session lifetime */ const esp_key_config_t *server_key; /*!< Unified key config. Must remain valid for session lifetime.
Any PSA key referenced here remains owned by the caller; ESP-TLS does not
destroy it on cleanup, so the application must release it with psa_destroy_key(). */
union { union {
unsigned int serverkey_bytes; /*!< Size of server key pointed to by unsigned int serverkey_bytes; /*!< Size of server key pointed to by
components/esp-tls/esp_tls_mbedtls.c
-1
View File
@@ -476,7 +476,6 @@ void esp_mbedtls_cleanup(esp_tls_t *tls)
if (!tls) { if (!tls) {
return; return;
} }
if (tls->cacert_ptr != global_cacert) { if (tls->cacert_ptr != global_cacert) {
mbedtls_x509_crt_free(tls->cacert_ptr); mbedtls_x509_crt_free(tls->cacert_ptr);
} }
components/mbedtls/sdkconfig.rename
-2
View File
@@ -1,5 +1,3 @@
# Renamed ATCA/SE ECDSA options to generic secure element (v6.0) # Renamed ATCA/SE ECDSA options to generic secure element (v6.0)
CONFIG_MBEDTLS_ATCA_HW_ECDSA_SIGN CONFIG_MBEDTLS_SECURE_ELEMENT_DRIVER_ENABLED CONFIG_MBEDTLS_ATCA_HW_ECDSA_SIGN CONFIG_MBEDTLS_SECURE_ELEMENT_DRIVER_ENABLED
CONFIG_MBEDTLS_ATCA_HW_ECDSA_VERIFY CONFIG_MBEDTLS_SECURE_ELEMENT_DRIVER_ENABLED CONFIG_MBEDTLS_ATCA_HW_ECDSA_VERIFY CONFIG_MBEDTLS_SECURE_ELEMENT_DRIVER_ENABLED
CONFIG_MBEDTLS_SE_HW_ECDSA_SIGN CONFIG_MBEDTLS_SECURE_ELEMENT_DRIVER_ENABLED
CONFIG_MBEDTLS_SE_HW_ECDSA_VERIFY CONFIG_MBEDTLS_SECURE_ELEMENT_DRIVER_ENABLED