Mbed TLS should build out-of-the box on a large variety of platforms. However, you may need to adjust a few platform-specific settings or want to customize the set of features that will be built. You can do all of this in a single configuration file.
The configuration fileThe default configuration file is located in include/mbedtls/mbedtls_config.h (include/mbedtls/config.h up to Mbed TLS 2.28). It is fully documented and contains the following sections:
Select options depending on your platform in System support: does your compiler support inline assembly, does your libc/network stack provide IPv6, and so on.
Select which features you want to enable for corresponding modules in Mbed TLS feature support: which TLS version to support, which key exchanges, which specific elliptic curves, and so on.
Select modules to build in Mbed TLS modules. You can, for example, completely disable RSA or MD5 if you don’t need them.
Set specific options for each module, such as the maximum size of multi-precision integers, or the size of the internal I/O buffers for SSL, in Module configuration options. All of these options have default values.
You can edit the configuration file manually with a text editor of your choice. In some cases, however, it may be useful to set options in a more programmatic way. We provide a Python script scripts/config.py for doing so: scripts/config.py unset <name> scripts/config.py set <name> [<value>] The config.py script automatically finds the mbedtls_config.h file when it runs this way from Mbed TLS’ root directory. If you want to run it from another directory or on another configuration file (see below), you need to use the -f option.
You might want to keep the custom configuration file for your application outside the Mbed TLS source tree. You can do this by defining the macro MBEDTLS_CONFIG_FILE for the desired filename (including the quote or angular brackets) at compile time. For example, using make: (Note: The angle brackets <> are included in the command, but they could be replaced with properly escaped double quotes \"\".) CFLAGS="-Ipath/to/config -DMBEDTLS_CONFIG_FILE='<my_config.h>'" make or, using Cmake:
If it is not the first run, clear its cache before running:
find . -iname '*cmake*' -not -name CMakeLists.txt -exec rm -rf {} +
CFLAGS="-Ipath/to/config -DMBEDTLS_CONFIG_FILE='<my_config.h>'" cmake .
make
Mbed TLS 2.2x only: We provide a check_config.h file that checks the consistency of the configuration file. We highly recommended to include it at the end of your custom configuration file. If you use the above setup, you may need to adapt the include directive depending on your compiler. (Since Mbed TLS 3.0, check_config.h is included automatically.)
We provide example configurations in the configs directory. These are often minimal configurations for a specific goal, such as supporting the NSA suite B TLS profile. They also often include settings to reduce resource usage.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4