072-ssl-call-mbedtls_ssl_conf_renegotiation-only-if-avai.patch (1373B)
1 From 3684ac3720f91dc131c1c61689395a69ae1865f9 Mon Sep 17 00:00:00 2001 2 From: Hauke Mehrtens <hauke@hauke-m.de> 3 Date: Sun, 8 Jan 2017 20:31:18 +0100 4 Subject: [PATCH 7/7] ssl: call mbedtls_ssl_conf_renegotiation() only if 5 available 6 7 The function mbedtls_ssl_conf_renegotiation() is only available if 8 MBEDTLS_SSL_RENEGOTIATION is set in the mbedtls configuration. Check this 9 before calling this function. 10 11 This fixes a compile problem when MBEDTLS_SSL_RENEGOTIATION is not set. 12 13 Change-Id: I69f15359d2dcaed1e4fe56fc7799737e38d6c2e7 14 Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de> 15 --- 16 resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c | 2 ++ 17 1 file changed, 2 insertions(+) 18 19 --- a/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c 20 +++ b/resource/csdk/connectivity/src/adapter_util/ca_adapter_net_ssl.c 21 @@ -1273,7 +1273,9 @@ static int InitConfig(mbedtls_ssl_config 22 mbedtls_ssl_conf_rng(conf, mbedtls_ctr_drbg_random, &g_caSslContext->rnd); 23 mbedtls_ssl_conf_curves(conf, curve[ADAPTER_CURVE_SECP256R1]); 24 mbedtls_ssl_conf_min_version(conf, MBEDTLS_SSL_MAJOR_VERSION_3, MBEDTLS_SSL_MINOR_VERSION_3); 25 +#ifdef MBEDTLS_SSL_RENEGOTIATION 26 mbedtls_ssl_conf_renegotiation(conf, MBEDTLS_SSL_RENEGOTIATION_DISABLED); 27 +#endif 28 mbedtls_ssl_conf_authmode(conf, MBEDTLS_SSL_VERIFY_REQUIRED); 29 30 #if !defined(NDEBUG) || defined(TB_LOG)