Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-01 18:50:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

feat(mbedtls): enable cross signed certificate verification support by default

Browse Source
This commit is contained in:
Ashish Sharma
2026-09-02 13:58:29 +05:30
committed by Mahavir Jain
parent 6a0c7764e7
commit b508d7bf9b
5 changed files with 16 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/en/api-reference/protocols/esp_crt_bundle.rst
+1 -1
View File
@@ -91,7 +91,7 @@ With this functionality enabled, certificate verification is performed in a mann
.. note::
Enabling cross-signed certificate support increases run-time heap utilization by approximately 700 bytes, but reduces the flash footprint as the bundle size is reduced.
Enabling cross-signed certificate support increases peak run-time heap usage during the TLS handshake by approximately 1 KB. This is a transient allocation (a candidate CA certificate built during certificate verification) that is freed once the handshake completes, and the exact amount scales with the maximum supported RSA key size. It also reduces the flash footprint, as the bundle size is reduced.
Key Points:
docs/en/api-reference/protocols/mbedtls.rst
+4
View File
@@ -406,6 +406,10 @@ The following table shows typical memory usage with different configs when the :
These values are subject to change with changes in configuration options and versions of Mbed TLS.
.. note::
:ref:`CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_CROSS_SIGNED_VERIFY` is enabled by default. If cross-signed certificate chains are not required, disabling it reduces peak heap usage during the TLS handshake by approximately 1 KB, at the cost of a larger certificate bundle in flash. See :doc:`/api-reference/protocols/esp_crt_bundle` for details.
Reducing Binary Size
^^^^^^^^^^^^^^^^^^^^