wpa_supplicant: Disable TLSv1.2 by default

Some Enterprise Authentication Servers do not support TLS v1.2. Move this option to Menuconfig and disable by default.
2020-04-28 10:05:35 +05:30 · 2020-04-28 10:05:35 +05:30 · 59e8e407a0
parent df5cead7e6
commit 59e8e407a0
3 changed files with 9 additions and 1 deletions
--- a/components/wpa_supplicant/CMakeLists.txt
+++ b/components/wpa_supplicant/CMakeLists.txt
@ -118,7 +118,6 @@ target_compile_definitions(${COMPONENT_LIB} PRIVATE
    CONFIG_ECC
    CONFIG_IEEE80211W
    CONFIG_WPA3_SAE
-    CONFIG_TLSV12
    CONFIG_SHA256
    CONFIG_DPP
    )
--- a/components/wpa_supplicant/Kconfig
+++ b/components/wpa_supplicant/Kconfig
@ -23,5 +23,10 @@ menu "Supplicant"
        help
            Select this to enable unity test for DPP.

+    config WPA_TLS_V12
+        bool "Enable TLS v1.2"
+        default n
+        help
+            Select this to enable TLS v1.2 for WPA2-Enterprise Authentication.

 endmenu
--- a/components/wpa_supplicant/port/include/supplicant_opt.h
+++ b/components/wpa_supplicant/port/include/supplicant_opt.h
@ -25,4 +25,8 @@
 #define DEBUG_PRINT
 #endif

+#if CONFIG_WPA_TLS_V12
+#define CONFIG_TLSV12
+#endif
+
 #endif /* _SUPPLICANT_OPT_H */