Adding delayed server cert verification config option

This commit is contained in:
Hannes Tschofenig 2020-12-03 15:47:47 +01:00
parent c7f6d7f75c
commit f336c7ea71

View file

@ -40,6 +40,15 @@
* \{
*/
/**
* \def MBEDTLS_DELAYED_SERVER_CERT_VERIFICATION
*
* Enable the delayed verification of server
* certificates on the client side.
*
*/
#define MBEDTLS_DELAYED_SERVER_CERT_VERIFICATION
/**
* \def MBEDTLS_HAVE_ASM
*
@ -1592,6 +1601,20 @@
*/
#define MBEDTLS_SSL_KEEP_PEER_CERTIFICATE
/**
* \def MBEDTLS_SSL_FREE_SERVER_CERTIFICATE
*
* This option controls determines whether the server certificate is discarded
* after a handshake when the MBEDTLS_SSL_KEEP_PEER_CERTIFICATE is enabled.
*
* Use of this option is useful in combined with the delayed certificate verification
* when the server certificate has to be kept for the duration of the handshake
* but not afterwards.
*
*/
#define MBEDTLS_SSL_FREE_SERVER_CERTIFICATE
/**
* \def MBEDTLS_SSL_HW_RECORD_ACCEL
*