Skip to content

Commit

Permalink
extmod/mbedtls: Enable certificate time/date validation by default.
Browse files Browse the repository at this point in the history
All ports using this common configuration already enable time/date
validation, so this commit is a no-op change.

Signed-off-by: Damien George <damien@micropython.org>
  • Loading branch information
dpgeorge committed Dec 1, 2023
1 parent 20ffbe1 commit b5449b0
Show file tree
Hide file tree
Showing 6 changed files with 2 additions and 18 deletions.
2 changes: 2 additions & 0 deletions extmod/mbedtls/mbedtls_config_common.h
Expand Up @@ -31,6 +31,8 @@
// #define MBEDTLS_DEBUG_C

// Set mbedtls configuration.
#define MBEDTLS_HAVE_TIME
#define MBEDTLS_HAVE_TIME_DATE
#define MBEDTLS_DEPRECATED_REMOVED
#define MBEDTLS_AES_ROM_TABLES
#define MBEDTLS_CIPHER_MODE_CBC
Expand Down
4 changes: 0 additions & 4 deletions ports/mimxrt/mbedtls/mbedtls_config.h
Expand Up @@ -26,10 +26,6 @@
#ifndef MICROPY_INCLUDED_MBEDTLS_CONFIG_H
#define MICROPY_INCLUDED_MBEDTLS_CONFIG_H

// Enable mbedtls modules.
#define MBEDTLS_HAVE_TIME
#define MBEDTLS_HAVE_TIME_DATE

// Time hook.
#include <time.h>
extern time_t mimxrt_rtctime_seconds(time_t *timer);
Expand Down
4 changes: 0 additions & 4 deletions ports/renesas-ra/mbedtls/mbedtls_config.h
Expand Up @@ -26,10 +26,6 @@
#ifndef MICROPY_INCLUDED_MBEDTLS_CONFIG_H
#define MICROPY_INCLUDED_MBEDTLS_CONFIG_H

// Enable mbedtls modules.
#define MBEDTLS_HAVE_TIME
#define MBEDTLS_HAVE_TIME_DATE

// Time hook.
#include <time.h>
extern time_t ra_rtctime_seconds(time_t *timer);
Expand Down
2 changes: 0 additions & 2 deletions ports/rp2/mbedtls/mbedtls_config.h
Expand Up @@ -32,8 +32,6 @@

// Enable mbedtls modules
#define MBEDTLS_GCM_C
#define MBEDTLS_HAVE_TIME
#define MBEDTLS_HAVE_TIME_DATE

// Time hook
#include <time.h>
Expand Down
4 changes: 0 additions & 4 deletions ports/stm32/mbedtls/mbedtls_config.h
Expand Up @@ -26,10 +26,6 @@
#ifndef MICROPY_INCLUDED_MBEDTLS_CONFIG_H
#define MICROPY_INCLUDED_MBEDTLS_CONFIG_H

// Enable mbedtls modules.
#define MBEDTLS_HAVE_TIME
#define MBEDTLS_HAVE_TIME_DATE

// Time hook.
#include <time.h>
extern time_t stm32_rtctime_seconds(time_t *timer);
Expand Down
4 changes: 0 additions & 4 deletions ports/unix/mbedtls/mbedtls_config.h
Expand Up @@ -29,10 +29,6 @@
// Set mbedtls configuration
#define MBEDTLS_CIPHER_MODE_CTR // needed for MICROPY_PY_CRYPTOLIB_CTR

// Cert time validation
#define MBEDTLS_HAVE_TIME
#define MBEDTLS_HAVE_TIME_DATE

// Enable mbedtls modules
#define MBEDTLS_HAVEGE_C
#define MBEDTLS_TIMING_C
Expand Down

0 comments on commit b5449b0

Please sign in to comment.