From 77992bc710bbc16798c12da7081769817f87791a Mon Sep 17 00:00:00 2001 From: Vladislav Vaintroub Date: Wed, 28 Jul 2021 15:43:12 +0200 Subject: [PATCH] MDEV-26092 Remove things we do not use in wolfssl Add a couple of NO_XXX prprocessor constants to wolfssl build. Looked into cmake defaults, those are set there too. Some of these are (supposedly) weak ciphers, and some just fallen out from wide use. --- extra/wolfssl/user_settings.h.in | 11 +++++++++-- 1 file changed, 9 insertions(+), 2 deletions(-) diff --git a/extra/wolfssl/user_settings.h.in b/extra/wolfssl/user_settings.h.in index 9e65c5adf18..55b43655659 100644 --- a/extra/wolfssl/user_settings.h.in +++ b/extra/wolfssl/user_settings.h.in @@ -33,12 +33,19 @@ #define WC_RSA_PSS /* End of TLSv1.3 defines */ +/* Features we exclude */ +#define NO_DSA +#define NO_HC128 +#define NO_MD4 +#define NO_PSK +#define NO_RABBIT +#define NO_RC4 + /* FP_MAX_BITS is set high solely to satisfy ssl_8k_key.test WolfSSL will use more stack space with it, with fastmath */ -#define FP_MAX_BITS 16384 - +#cmakedefine FP_MAX_BITS 16384 #cmakedefine WOLFSSL_AESNI #cmakedefine USE_FAST_MATH #cmakedefine TFM_TIMING_RESISTANT