mbedtls
mbedtls copied to clipboard
Add client-server build to all.sh
Starting from the all.sh
component created in https://github.com/Mbed-TLS/mbedtls/issues/8962:
- In that component, build Mbed TLS twice, in separate build directories:
- Once with the configuration of
component_build_full_psa_crypto_client_without_crypto_provider
, but with some potentially problematic features disabled:- Disable
MBEDTLS_X509_RSASSA_PSS_SUPPORT
and the RSA key exchanges. - Disable restartable ECC.
- Disable multithreading.
- Disable
- once with the configuration of
component_build_psa_crypto_spm
(and that component can be removed).
- Once with the configuration of
- Run psasim with a server linked with libmbedcrypto with the SPM configuration, and a client linked with libmbed{crypto,x509,tls}.
- Implement
psa_crypto_init
on the client to open a connection to the server, andmbedtls_psa_crypto_free
to close the connection. The server doesn't need to maintain any client state (that will come later).
Prerequisites: https://github.com/Mbed-TLS/mbedtls/issues/8962