Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-01 18:50:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat(mbedtls): enable cross signed certificate verification support by default

Browse Source
This commit is contained in:
Ashish Sharma
2026-07-06 15:34:51 +08:00
parent 309b3e82ec
commit 5ea5256b96
5 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
components/mbedtls/Kconfig
+6 -3
View File
@@ -545,14 +545,17 @@ menu "mbedTLS"
config MBEDTLS_CERTIFICATE_BUNDLE_CROSS_SIGNED_VERIFY
bool "Support cross-signed certificate verification in certificate bundle"
default n
default y
depends on MBEDTLS_CERTIFICATE_BUNDLE
select MBEDTLS_X509_TRUSTED_CERT_CALLBACK
help
Enable support for cross-signed certificate verification in the certificate bundle.
This feature uses an internal callback to verify the cross-signed certificates.
This feature is kept disabled by default as enabling this feature increases
heap usage by approximately 700 bytes.
Enabling this feature increases peak heap usage during the TLS handshake by
approximately 1 KB. This is a transient allocation (a candidate CA certificate
built during certificate verification) that is freed once the handshake completes,
and the exact amount scales with the maximum supported RSA key size.
endmenu
config MBEDTLS_TLS_ENABLED