1 /** 2 * \file check_config.h 3 * 4 * \brief Consistency checks for configuration options 5 */ 6 /* 7 * Copyright The Mbed TLS Contributors 8 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later 9 */ 10 11 #ifndef MBEDTLS_CHECK_CONFIG_H 12 #define MBEDTLS_CHECK_CONFIG_H 13 14 /* *INDENT-OFF* */ 15 /* 16 * We assume CHAR_BIT is 8 in many places. In practice, this is true on our 17 * target platforms, so not an issue, but let's just be extra sure. 18 */ 19 #include <limits.h> 20 #if CHAR_BIT != 8 21 #error "Mbed TLS requires a platform with 8-bit chars" 22 #endif 23 24 #include <stdint.h> 25 26 #if defined(__MINGW32__) || (defined(_MSC_VER) && _MSC_VER <= 1900) 27 #if !defined(MBEDTLS_PLATFORM_C) 28 #error "MBEDTLS_PLATFORM_C is required on Windows" 29 #endif 30 /* See auto-enabling SNPRINTF_ALT and VSNPRINTF_ALT 31 * in * config_adjust_legacy_crypto.h */ 32 #endif /* _MINGW32__ || (_MSC_VER && (_MSC_VER <= 1900)) */ 33 34 #if defined(TARGET_LIKE_MBED) && defined(MBEDTLS_NET_C) 35 #error "The NET module is not available for mbed OS - please use the network functions provided by Mbed OS" 36 #endif 37 38 #if defined(MBEDTLS_DEPRECATED_WARNING) && \ 39 !defined(__GNUC__) && !defined(__clang__) 40 #error "MBEDTLS_DEPRECATED_WARNING only works with GCC and Clang" 41 #endif 42 43 #if defined(MBEDTLS_HAVE_TIME_DATE) && !defined(MBEDTLS_HAVE_TIME) 44 #error "MBEDTLS_HAVE_TIME_DATE without MBEDTLS_HAVE_TIME does not make sense" 45 #endif 46 47 /* Limitations on ECC key types acceleration: if we have any of `PUBLIC_KEY`, 48 * `KEY_PAIR_BASIC`, `KEY_PAIR_IMPORT`, `KEY_PAIR_EXPORT` then we must have 49 * all 4 of them. 50 */ 51 #if defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY) || \ 52 defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \ 53 defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \ 54 defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT) 55 #if !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_PUBLIC_KEY) || \ 56 !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \ 57 !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_IMPORT) || \ 58 !defined(MBEDTLS_PSA_ACCEL_KEY_TYPE_ECC_KEY_PAIR_EXPORT) 59 #error "Unsupported partial support for ECC key type acceleration, see docs/driver-only-builds.md" 60 #endif /* not all of public, basic, import, export */ 61 #endif /* one of public, basic, import, export */ 62 63 /* Limitations on ECC curves acceleration: partial curve acceleration is only 64 * supported with crypto excluding PK, X.509 or TLS. 65 * Note: no need to check X.509 as it depends on PK. */ 66 #if defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_256) || \ 67 defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_384) || \ 68 defined(MBEDTLS_PSA_ACCEL_ECC_BRAINPOOL_P_R1_512) || \ 69 defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_255) || \ 70 defined(MBEDTLS_PSA_ACCEL_ECC_MONTGOMERY_448) || \ 71 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_192) || \ 72 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_224) || \ 73 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_K1_256) || \ 74 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_192) || \ 75 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_224) || \ 76 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_256) || \ 77 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_384) || \ 78 defined(MBEDTLS_PSA_ACCEL_ECC_SECP_R1_521) 79 #if defined(MBEDTLS_PSA_ECC_ACCEL_INCOMPLETE_CURVES) 80 #if defined(MBEDTLS_PK_C) || \ 81 defined(MBEDTLS_SSL_TLS_C) 82 #error "Unsupported partial support for ECC curves acceleration, see docs/driver-only-builds.md" 83 #endif /* modules beyond what's supported */ 84 #endif /* not all curves accelerated */ 85 #endif /* some curve accelerated */ 86 87 #if defined(MBEDTLS_CTR_DRBG_C) && !(defined(MBEDTLS_AES_C) || \ 88 (defined(MBEDTLS_PSA_CRYPTO_CLIENT) && defined(PSA_WANT_KEY_TYPE_AES) && \ 89 defined(PSA_WANT_ALG_ECB_NO_PADDING))) 90 #error "MBEDTLS_CTR_DRBG_C defined, but not all prerequisites" 91 #endif 92 93 #if defined(MBEDTLS_DHM_C) && !defined(MBEDTLS_BIGNUM_C) 94 #error "MBEDTLS_DHM_C defined, but not all prerequisites" 95 #endif 96 97 #if defined(MBEDTLS_CMAC_C) && \ 98 ( !defined(MBEDTLS_CIPHER_C ) || ( !defined(MBEDTLS_AES_C) && !defined(MBEDTLS_DES_C) ) ) 99 #error "MBEDTLS_CMAC_C defined, but not all prerequisites" 100 #endif 101 102 #if defined(MBEDTLS_NIST_KW_C) && \ 103 ( !defined(MBEDTLS_AES_C) || !defined(MBEDTLS_CIPHER_C) ) 104 #error "MBEDTLS_NIST_KW_C defined, but not all prerequisites" 105 #endif 106 107 #if defined(MBEDTLS_BLOCK_CIPHER_NO_DECRYPT) && defined(MBEDTLS_PSA_CRYPTO_CONFIG) 108 #if defined(PSA_WANT_ALG_CBC_NO_PADDING) 109 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_ALG_CBC_NO_PADDING cannot be defined simultaneously" 110 #endif 111 #if defined(PSA_WANT_ALG_CBC_PKCS7) 112 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_ALG_CBC_PKCS7 cannot be defined simultaneously" 113 #endif 114 #if defined(PSA_WANT_ALG_ECB_NO_PADDING) 115 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_ALG_ECB_NO_PADDING cannot be defined simultaneously" 116 #endif 117 #if defined(PSA_WANT_KEY_TYPE_DES) 118 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and PSA_WANT_KEY_TYPE_DES cannot be defined simultaneously" 119 #endif 120 #endif 121 122 #if defined(MBEDTLS_BLOCK_CIPHER_NO_DECRYPT) 123 #if defined(MBEDTLS_CIPHER_MODE_CBC) 124 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_CIPHER_MODE_CBC cannot be defined simultaneously" 125 #endif 126 #if defined(MBEDTLS_CIPHER_MODE_XTS) 127 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_CIPHER_MODE_XTS cannot be defined simultaneously" 128 #endif 129 #if defined(MBEDTLS_DES_C) 130 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_DES_C cannot be defined simultaneously" 131 #endif 132 #if defined(MBEDTLS_NIST_KW_C) 133 #error "MBEDTLS_BLOCK_CIPHER_NO_DECRYPT and MBEDTLS_NIST_KW_C cannot be defined simultaneously" 134 #endif 135 #endif 136 137 #if defined(MBEDTLS_ECDH_C) && !defined(MBEDTLS_ECP_C) 138 #error "MBEDTLS_ECDH_C defined, but not all prerequisites" 139 #endif 140 141 #if defined(MBEDTLS_ECDSA_C) && \ 142 ( !defined(MBEDTLS_ECP_C) || \ 143 !( defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED) || \ 144 defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED) || \ 145 defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) || \ 146 defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED) || \ 147 defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED) || \ 148 defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED) || \ 149 defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED) || \ 150 defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED) || \ 151 defined(MBEDTLS_ECP_DP_BP256R1_ENABLED) || \ 152 defined(MBEDTLS_ECP_DP_BP384R1_ENABLED) || \ 153 defined(MBEDTLS_ECP_DP_BP512R1_ENABLED) ) || \ 154 !defined(MBEDTLS_ASN1_PARSE_C) || \ 155 !defined(MBEDTLS_ASN1_WRITE_C) ) 156 #error "MBEDTLS_ECDSA_C defined, but not all prerequisites" 157 #endif 158 159 #if defined(MBEDTLS_PK_C) && defined(MBEDTLS_USE_PSA_CRYPTO) 160 #if defined(MBEDTLS_PK_CAN_ECDSA_SIGN) && !defined(MBEDTLS_ASN1_WRITE_C) 161 #error "MBEDTLS_PK_C with MBEDTLS_USE_PSA_CRYPTO needs MBEDTLS_ASN1_WRITE_C for ECDSA signature" 162 #endif 163 #if defined(MBEDTLS_PK_CAN_ECDSA_VERIFY) && !defined(MBEDTLS_ASN1_PARSE_C) 164 #error "MBEDTLS_PK_C with MBEDTLS_USE_PSA_CRYPTO needs MBEDTLS_ASN1_PARSE_C for ECDSA verification" 165 #endif 166 #endif /* MBEDTLS_PK_C && MBEDTLS_USE_PSA_CRYPTO */ 167 168 #if defined(MBEDTLS_ECJPAKE_C) && \ 169 !defined(MBEDTLS_ECP_C) 170 #error "MBEDTLS_ECJPAKE_C defined, but not all prerequisites" 171 #endif 172 173 #if defined(MBEDTLS_ECP_RESTARTABLE) && \ 174 ( defined(MBEDTLS_ECDH_COMPUTE_SHARED_ALT) || \ 175 defined(MBEDTLS_ECDH_GEN_PUBLIC_ALT) || \ 176 defined(MBEDTLS_ECDSA_SIGN_ALT) || \ 177 defined(MBEDTLS_ECDSA_VERIFY_ALT) || \ 178 defined(MBEDTLS_ECDSA_GENKEY_ALT) || \ 179 defined(MBEDTLS_ECP_INTERNAL_ALT) || \ 180 defined(MBEDTLS_ECP_ALT) ) 181 #error "MBEDTLS_ECP_RESTARTABLE defined, but it cannot coexist with an alternative ECP implementation" 182 #endif 183 184 #if defined(MBEDTLS_ECP_RESTARTABLE) && \ 185 !defined(MBEDTLS_ECP_C) 186 #error "MBEDTLS_ECP_RESTARTABLE defined, but not all prerequisites" 187 #endif 188 189 #if defined(MBEDTLS_ECDSA_DETERMINISTIC) && !defined(MBEDTLS_HMAC_DRBG_C) 190 #error "MBEDTLS_ECDSA_DETERMINISTIC defined, but not all prerequisites" 191 #endif 192 193 #if defined(MBEDTLS_ECP_LIGHT) && ( !defined(MBEDTLS_BIGNUM_C) || ( \ 194 !defined(MBEDTLS_ECP_DP_SECP192R1_ENABLED) && \ 195 !defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED) && \ 196 !defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) && \ 197 !defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED) && \ 198 !defined(MBEDTLS_ECP_DP_SECP521R1_ENABLED) && \ 199 !defined(MBEDTLS_ECP_DP_BP256R1_ENABLED) && \ 200 !defined(MBEDTLS_ECP_DP_BP384R1_ENABLED) && \ 201 !defined(MBEDTLS_ECP_DP_BP512R1_ENABLED) && \ 202 !defined(MBEDTLS_ECP_DP_SECP192K1_ENABLED) && \ 203 !defined(MBEDTLS_ECP_DP_SECP224K1_ENABLED) && \ 204 !defined(MBEDTLS_ECP_DP_SECP256K1_ENABLED) && \ 205 !defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED) && \ 206 !defined(MBEDTLS_ECP_DP_CURVE448_ENABLED) ) ) 207 #error "MBEDTLS_ECP_C defined (or a subset enabled), but not all prerequisites" 208 #endif 209 210 #if defined(MBEDTLS_ENTROPY_C) && \ 211 !(defined(MBEDTLS_MD_CAN_SHA512) || defined(MBEDTLS_MD_CAN_SHA256)) 212 #error "MBEDTLS_ENTROPY_C defined, but not all prerequisites" 213 #endif 214 #if defined(MBEDTLS_ENTROPY_C) && \ 215 defined(MBEDTLS_CTR_DRBG_ENTROPY_LEN) && (MBEDTLS_CTR_DRBG_ENTROPY_LEN > 64) 216 #error "MBEDTLS_CTR_DRBG_ENTROPY_LEN value too high" 217 #endif 218 #if defined(MBEDTLS_ENTROPY_C) && \ 219 (defined(MBEDTLS_ENTROPY_FORCE_SHA256) || !defined(MBEDTLS_MD_CAN_SHA512)) \ 220 && defined(MBEDTLS_CTR_DRBG_ENTROPY_LEN) && (MBEDTLS_CTR_DRBG_ENTROPY_LEN > 32) 221 #error "MBEDTLS_CTR_DRBG_ENTROPY_LEN value too high" 222 #endif 223 #if defined(MBEDTLS_ENTROPY_C) && \ 224 defined(MBEDTLS_ENTROPY_FORCE_SHA256) && !defined(MBEDTLS_MD_CAN_SHA256) 225 #error "MBEDTLS_ENTROPY_FORCE_SHA256 defined, but not all prerequisites" 226 #endif 227 228 #if defined(__has_feature) 229 #if __has_feature(memory_sanitizer) 230 #define MBEDTLS_HAS_MEMSAN // #undef at the end of this paragraph 231 #endif 232 #endif 233 #if defined(MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN) && !defined(MBEDTLS_HAS_MEMSAN) 234 #error "MBEDTLS_TEST_CONSTANT_FLOW_MEMSAN requires building with MemorySanitizer" 235 #endif 236 #undef MBEDTLS_HAS_MEMSAN // temporary macro defined above 237 238 #if defined(MBEDTLS_CCM_C) && \ 239 !(defined(MBEDTLS_CCM_GCM_CAN_AES) || defined(MBEDTLS_CCM_GCM_CAN_ARIA) || \ 240 defined(MBEDTLS_CCM_GCM_CAN_CAMELLIA)) 241 #error "MBEDTLS_CCM_C defined, but not all prerequisites" 242 #endif 243 244 #if defined(MBEDTLS_GCM_C) && \ 245 !(defined(MBEDTLS_CCM_GCM_CAN_AES) || defined(MBEDTLS_CCM_GCM_CAN_ARIA) || \ 246 defined(MBEDTLS_CCM_GCM_CAN_CAMELLIA)) 247 #error "MBEDTLS_GCM_C defined, but not all prerequisites" 248 #endif 249 250 #if defined(MBEDTLS_CHACHAPOLY_C) && !defined(MBEDTLS_CHACHA20_C) 251 #error "MBEDTLS_CHACHAPOLY_C defined, but not all prerequisites" 252 #endif 253 254 #if defined(MBEDTLS_CHACHAPOLY_C) && !defined(MBEDTLS_POLY1305_C) 255 #error "MBEDTLS_CHACHAPOLY_C defined, but not all prerequisites" 256 #endif 257 258 #if defined(MBEDTLS_ECP_RANDOMIZE_JAC_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT) 259 #error "MBEDTLS_ECP_RANDOMIZE_JAC_ALT defined, but not all prerequisites" 260 #endif 261 262 #if defined(MBEDTLS_ECP_ADD_MIXED_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT) 263 #error "MBEDTLS_ECP_ADD_MIXED_ALT defined, but not all prerequisites" 264 #endif 265 266 #if defined(MBEDTLS_ECP_DOUBLE_JAC_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT) 267 #error "MBEDTLS_ECP_DOUBLE_JAC_ALT defined, but not all prerequisites" 268 #endif 269 270 #if defined(MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT) 271 #error "MBEDTLS_ECP_NORMALIZE_JAC_MANY_ALT defined, but not all prerequisites" 272 #endif 273 274 #if defined(MBEDTLS_ECP_NORMALIZE_JAC_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT) 275 #error "MBEDTLS_ECP_NORMALIZE_JAC_ALT defined, but not all prerequisites" 276 #endif 277 278 #if defined(MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT) 279 #error "MBEDTLS_ECP_DOUBLE_ADD_MXZ_ALT defined, but not all prerequisites" 280 #endif 281 282 #if defined(MBEDTLS_ECP_RANDOMIZE_MXZ_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT) 283 #error "MBEDTLS_ECP_RANDOMIZE_MXZ_ALT defined, but not all prerequisites" 284 #endif 285 286 #if defined(MBEDTLS_ECP_NORMALIZE_MXZ_ALT) && !defined(MBEDTLS_ECP_INTERNAL_ALT) 287 #error "MBEDTLS_ECP_NORMALIZE_MXZ_ALT defined, but not all prerequisites" 288 #endif 289 290 #if defined(MBEDTLS_ECP_NO_FALLBACK) && !defined(MBEDTLS_ECP_INTERNAL_ALT) 291 #error "MBEDTLS_ECP_NO_FALLBACK defined, but no alternative implementation enabled" 292 #endif 293 294 #if defined(MBEDTLS_HKDF_C) && !defined(MBEDTLS_MD_C) 295 #error "MBEDTLS_HKDF_C defined, but not all prerequisites" 296 #endif 297 298 #if defined(MBEDTLS_HMAC_DRBG_C) && !defined(MBEDTLS_MD_C) 299 #error "MBEDTLS_HMAC_DRBG_C defined, but not all prerequisites" 300 #endif 301 302 #if defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED) && \ 303 ( !defined(MBEDTLS_CAN_ECDH) || \ 304 !defined(MBEDTLS_PK_CAN_ECDSA_SIGN) || \ 305 !defined(MBEDTLS_X509_CRT_PARSE_C) ) 306 #error "MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED defined, but not all prerequisites" 307 #endif 308 309 #if defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED) && \ 310 ( !defined(MBEDTLS_CAN_ECDH) || !defined(MBEDTLS_RSA_C) || \ 311 !defined(MBEDTLS_X509_CRT_PARSE_C) ) 312 #error "MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED defined, but not all prerequisites" 313 #endif 314 315 #if defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED) && !defined(MBEDTLS_DHM_C) 316 #error "MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED defined, but not all prerequisites" 317 #endif 318 319 #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED) && \ 320 !defined(MBEDTLS_CAN_ECDH) 321 #error "MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED defined, but not all prerequisites" 322 #endif 323 324 #if defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED) && \ 325 ( !defined(MBEDTLS_DHM_C) || !defined(MBEDTLS_RSA_C) || \ 326 !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_PKCS1_V15) ) 327 #error "MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED defined, but not all prerequisites" 328 #endif 329 330 #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED) && \ 331 ( !defined(MBEDTLS_CAN_ECDH) || !defined(MBEDTLS_RSA_C) || \ 332 !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(MBEDTLS_PKCS1_V15) ) 333 #error "MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED defined, but not all prerequisites" 334 #endif 335 336 #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED) && \ 337 ( !defined(MBEDTLS_CAN_ECDH) || \ 338 !defined(MBEDTLS_PK_CAN_ECDSA_SIGN) || \ 339 !defined(MBEDTLS_X509_CRT_PARSE_C) ) 340 #error "MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED defined, but not all prerequisites" 341 #endif 342 343 #if defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED) && \ 344 ( !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_X509_CRT_PARSE_C) || \ 345 !defined(MBEDTLS_PKCS1_V15) ) 346 #error "MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED defined, but not all prerequisites" 347 #endif 348 349 #if defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED) && \ 350 ( !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_X509_CRT_PARSE_C) || \ 351 !defined(MBEDTLS_PKCS1_V15) ) 352 #error "MBEDTLS_KEY_EXCHANGE_RSA_ENABLED defined, but not all prerequisites" 353 #endif 354 355 #if defined(MBEDTLS_USE_PSA_CRYPTO) 356 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \ 357 ( !defined(PSA_WANT_ALG_JPAKE) || \ 358 !defined(PSA_WANT_KEY_TYPE_ECC_KEY_PAIR_BASIC) || \ 359 !defined(PSA_WANT_ECC_SECP_R1_256) ) 360 #error "MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED defined, but not all prerequisites" 361 #endif 362 #else /* MBEDTLS_USE_PSA_CRYPTO */ 363 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \ 364 ( !defined(MBEDTLS_ECJPAKE_C) || \ 365 !defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) ) 366 #error "MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED defined, but not all prerequisites" 367 #endif 368 #endif /* MBEDTLS_USE_PSA_CRYPTO */ 369 370 /* Use of EC J-PAKE in TLS requires SHA-256. */ 371 #if defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) && \ 372 !defined(MBEDTLS_MD_CAN_SHA256) 373 #error "MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED defined, but not all prerequisites" 374 #endif 375 376 #if defined(MBEDTLS_KEY_EXCHANGE_WITH_CERT_ENABLED) && \ 377 !defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE) && \ 378 !defined(MBEDTLS_MD_CAN_SHA256) && \ 379 !defined(MBEDTLS_MD_CAN_SHA512) && \ 380 !defined(MBEDTLS_MD_CAN_SHA1) 381 #error "!MBEDTLS_SSL_KEEP_PEER_CERTIFICATE requires SHA-512, SHA-256 or SHA-1". 382 #endif 383 384 #if defined(MBEDTLS_MD_C) && \ 385 !defined(MBEDTLS_MD_CAN_MD5) && \ 386 !defined(MBEDTLS_MD_CAN_RIPEMD160) && \ 387 !defined(MBEDTLS_MD_CAN_SHA1) && \ 388 !defined(MBEDTLS_MD_CAN_SHA224) && \ 389 !defined(MBEDTLS_MD_CAN_SHA256) && \ 390 !defined(MBEDTLS_MD_CAN_SHA384) && \ 391 !defined(MBEDTLS_MD_CAN_SHA512) && \ 392 !defined(MBEDTLS_MD_CAN_SHA3_224) && \ 393 !defined(MBEDTLS_MD_CAN_SHA3_256) && \ 394 !defined(MBEDTLS_MD_CAN_SHA3_384) && \ 395 !defined(MBEDTLS_MD_CAN_SHA3_512) 396 #error "MBEDTLS_MD_C defined, but no hash algorithm" 397 #endif 398 399 #if defined(MBEDTLS_LMS_C) && \ 400 ! ( defined(MBEDTLS_PSA_CRYPTO_CLIENT) && defined(PSA_WANT_ALG_SHA_256) ) 401 #error "MBEDTLS_LMS_C requires MBEDTLS_PSA_CRYPTO_C and PSA_WANT_ALG_SHA_256" 402 #endif 403 404 #if defined(MBEDTLS_LMS_PRIVATE) && \ 405 ( !defined(MBEDTLS_LMS_C) ) 406 #error "MBEDTLS_LMS_PRIVATE requires MBEDTLS_LMS_C" 407 #endif 408 409 #if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C) && \ 410 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_PLATFORM_MEMORY) ) 411 #error "MBEDTLS_MEMORY_BUFFER_ALLOC_C defined, but not all prerequisites" 412 #endif 413 414 #if defined(MBEDTLS_MEMORY_BACKTRACE) && !defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C) 415 #error "MBEDTLS_MEMORY_BACKTRACE defined, but not all prerequisites" 416 #endif 417 418 #if defined(MBEDTLS_MEMORY_DEBUG) && !defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C) 419 #error "MBEDTLS_MEMORY_DEBUG defined, but not all prerequisites" 420 #endif 421 422 #if defined(MBEDTLS_PEM_PARSE_C) && !defined(MBEDTLS_BASE64_C) 423 #error "MBEDTLS_PEM_PARSE_C defined, but not all prerequisites" 424 #endif 425 426 #if defined(MBEDTLS_PEM_WRITE_C) && !defined(MBEDTLS_BASE64_C) 427 #error "MBEDTLS_PEM_WRITE_C defined, but not all prerequisites" 428 #endif 429 430 #if defined(MBEDTLS_PK_C) && \ 431 !defined(MBEDTLS_RSA_C) && !defined(MBEDTLS_PK_HAVE_ECC_KEYS) 432 #error "MBEDTLS_PK_C defined, but not all prerequisites" 433 #endif 434 435 #if defined(MBEDTLS_PK_PARSE_C) && \ 436 (!defined(MBEDTLS_ASN1_PARSE_C) || \ 437 !defined(MBEDTLS_OID_C) || \ 438 !defined(MBEDTLS_PK_C)) 439 #error "MBEDTLS_PK_PARSE_C defined, but not all prerequisites" 440 #endif 441 442 #if defined(MBEDTLS_PK_WRITE_C) && \ 443 (!defined(MBEDTLS_ASN1_WRITE_C) || \ 444 !defined(MBEDTLS_OID_C) || \ 445 !defined(MBEDTLS_PK_C)) 446 #error "MBEDTLS_PK_WRITE_C defined, but not all prerequisites" 447 #endif 448 449 #if defined(MBEDTLS_PLATFORM_EXIT_ALT) && !defined(MBEDTLS_PLATFORM_C) 450 #error "MBEDTLS_PLATFORM_EXIT_ALT defined, but not all prerequisites" 451 #endif 452 453 #if defined(MBEDTLS_PLATFORM_EXIT_MACRO) && !defined(MBEDTLS_PLATFORM_C) 454 #error "MBEDTLS_PLATFORM_EXIT_MACRO defined, but not all prerequisites" 455 #endif 456 457 #if defined(MBEDTLS_PLATFORM_EXIT_MACRO) &&\ 458 ( defined(MBEDTLS_PLATFORM_STD_EXIT) ||\ 459 defined(MBEDTLS_PLATFORM_EXIT_ALT) ) 460 #error "MBEDTLS_PLATFORM_EXIT_MACRO and MBEDTLS_PLATFORM_STD_EXIT/MBEDTLS_PLATFORM_EXIT_ALT cannot be defined simultaneously" 461 #endif 462 463 #if defined(MBEDTLS_PLATFORM_SETBUF_ALT) && !defined(MBEDTLS_PLATFORM_C) 464 #error "MBEDTLS_PLATFORM_SETBUF_ALT defined, but not all prerequisites" 465 #endif 466 467 #if defined(MBEDTLS_PLATFORM_SETBUF_MACRO) && !defined(MBEDTLS_PLATFORM_C) 468 #error "MBEDTLS_PLATFORM_SETBUF_MACRO defined, but not all prerequisites" 469 #endif 470 471 #if defined(MBEDTLS_PLATFORM_SETBUF_MACRO) &&\ 472 ( defined(MBEDTLS_PLATFORM_STD_SETBUF) ||\ 473 defined(MBEDTLS_PLATFORM_SETBUF_ALT) ) 474 #error "MBEDTLS_PLATFORM_SETBUF_MACRO and MBEDTLS_PLATFORM_STD_SETBUF/MBEDTLS_PLATFORM_SETBUF_ALT cannot be defined simultaneously" 475 #endif 476 477 #if defined(MBEDTLS_PLATFORM_TIME_ALT) &&\ 478 ( !defined(MBEDTLS_PLATFORM_C) ||\ 479 !defined(MBEDTLS_HAVE_TIME) ) 480 #error "MBEDTLS_PLATFORM_TIME_ALT defined, but not all prerequisites" 481 #endif 482 483 #if defined(MBEDTLS_PLATFORM_TIME_MACRO) &&\ 484 ( !defined(MBEDTLS_PLATFORM_C) ||\ 485 !defined(MBEDTLS_HAVE_TIME) ) 486 #error "MBEDTLS_PLATFORM_TIME_MACRO defined, but not all prerequisites" 487 #endif 488 489 #if defined(MBEDTLS_PLATFORM_MS_TIME_TYPE_MACRO) &&\ 490 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_HAVE_TIME) ) 491 #error "MBEDTLS_PLATFORM_MS_TIME_TYPE_MACRO defined, but not all prerequisites" 492 #endif 493 494 #if defined(MBEDTLS_PLATFORM_MS_TIME_ALT) && \ 495 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_HAVE_TIME) ) 496 #error "MBEDTLS_PLATFORM_MS_TIME_ALT defined, but not all prerequisites" 497 #endif 498 499 #if defined(MBEDTLS_PLATFORM_TIME_TYPE_MACRO) &&\ 500 ( !defined(MBEDTLS_PLATFORM_C) ||\ 501 !defined(MBEDTLS_HAVE_TIME) ) 502 #error "MBEDTLS_PLATFORM_TIME_TYPE_MACRO defined, but not all prerequisites" 503 #endif 504 505 #if defined(MBEDTLS_PLATFORM_TIME_MACRO) &&\ 506 ( defined(MBEDTLS_PLATFORM_STD_TIME) ||\ 507 defined(MBEDTLS_PLATFORM_TIME_ALT) ) 508 #error "MBEDTLS_PLATFORM_TIME_MACRO and MBEDTLS_PLATFORM_STD_TIME/MBEDTLS_PLATFORM_TIME_ALT cannot be defined simultaneously" 509 #endif 510 511 #if defined(MBEDTLS_PLATFORM_TIME_TYPE_MACRO) &&\ 512 ( defined(MBEDTLS_PLATFORM_STD_TIME) ||\ 513 defined(MBEDTLS_PLATFORM_TIME_ALT) ) 514 #error "MBEDTLS_PLATFORM_TIME_TYPE_MACRO and MBEDTLS_PLATFORM_STD_TIME/MBEDTLS_PLATFORM_TIME_ALT cannot be defined simultaneously" 515 #endif 516 517 #if defined(MBEDTLS_PLATFORM_FPRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C) 518 #error "MBEDTLS_PLATFORM_FPRINTF_ALT defined, but not all prerequisites" 519 #endif 520 521 #if defined(MBEDTLS_PLATFORM_FPRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C) 522 #error "MBEDTLS_PLATFORM_FPRINTF_MACRO defined, but not all prerequisites" 523 #endif 524 525 #if defined(MBEDTLS_PLATFORM_FPRINTF_MACRO) &&\ 526 ( defined(MBEDTLS_PLATFORM_STD_FPRINTF) ||\ 527 defined(MBEDTLS_PLATFORM_FPRINTF_ALT) ) 528 #error "MBEDTLS_PLATFORM_FPRINTF_MACRO and MBEDTLS_PLATFORM_STD_FPRINTF/MBEDTLS_PLATFORM_FPRINTF_ALT cannot be defined simultaneously" 529 #endif 530 531 #if defined(MBEDTLS_PLATFORM_FREE_MACRO) &&\ 532 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_PLATFORM_MEMORY) ) 533 #error "MBEDTLS_PLATFORM_FREE_MACRO defined, but not all prerequisites" 534 #endif 535 536 #if defined(MBEDTLS_PLATFORM_FREE_MACRO) &&\ 537 defined(MBEDTLS_PLATFORM_STD_FREE) 538 #error "MBEDTLS_PLATFORM_FREE_MACRO and MBEDTLS_PLATFORM_STD_FREE cannot be defined simultaneously" 539 #endif 540 541 #if defined(MBEDTLS_PLATFORM_FREE_MACRO) && !defined(MBEDTLS_PLATFORM_CALLOC_MACRO) 542 #error "MBEDTLS_PLATFORM_CALLOC_MACRO must be defined if MBEDTLS_PLATFORM_FREE_MACRO is" 543 #endif 544 545 #if defined(MBEDTLS_PLATFORM_CALLOC_MACRO) &&\ 546 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_PLATFORM_MEMORY) ) 547 #error "MBEDTLS_PLATFORM_CALLOC_MACRO defined, but not all prerequisites" 548 #endif 549 550 #if defined(MBEDTLS_PLATFORM_CALLOC_MACRO) &&\ 551 defined(MBEDTLS_PLATFORM_STD_CALLOC) 552 #error "MBEDTLS_PLATFORM_CALLOC_MACRO and MBEDTLS_PLATFORM_STD_CALLOC cannot be defined simultaneously" 553 #endif 554 555 #if defined(MBEDTLS_PLATFORM_CALLOC_MACRO) && !defined(MBEDTLS_PLATFORM_FREE_MACRO) 556 #error "MBEDTLS_PLATFORM_FREE_MACRO must be defined if MBEDTLS_PLATFORM_CALLOC_MACRO is" 557 #endif 558 559 #if defined(MBEDTLS_PLATFORM_MEMORY) && !defined(MBEDTLS_PLATFORM_C) 560 #error "MBEDTLS_PLATFORM_MEMORY defined, but not all prerequisites" 561 #endif 562 563 #if defined(MBEDTLS_PLATFORM_PRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C) 564 #error "MBEDTLS_PLATFORM_PRINTF_ALT defined, but not all prerequisites" 565 #endif 566 567 #if defined(MBEDTLS_PLATFORM_PRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C) 568 #error "MBEDTLS_PLATFORM_PRINTF_MACRO defined, but not all prerequisites" 569 #endif 570 571 #if defined(MBEDTLS_PLATFORM_PRINTF_MACRO) &&\ 572 ( defined(MBEDTLS_PLATFORM_STD_PRINTF) ||\ 573 defined(MBEDTLS_PLATFORM_PRINTF_ALT) ) 574 #error "MBEDTLS_PLATFORM_PRINTF_MACRO and MBEDTLS_PLATFORM_STD_PRINTF/MBEDTLS_PLATFORM_PRINTF_ALT cannot be defined simultaneously" 575 #endif 576 577 #if defined(MBEDTLS_PLATFORM_SNPRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C) 578 #error "MBEDTLS_PLATFORM_SNPRINTF_ALT defined, but not all prerequisites" 579 #endif 580 581 #if defined(MBEDTLS_PLATFORM_SNPRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C) 582 #error "MBEDTLS_PLATFORM_SNPRINTF_MACRO defined, but not all prerequisites" 583 #endif 584 585 #if defined(MBEDTLS_PLATFORM_SNPRINTF_MACRO) &&\ 586 ( defined(MBEDTLS_PLATFORM_STD_SNPRINTF) ||\ 587 defined(MBEDTLS_PLATFORM_SNPRINTF_ALT) ) 588 #error "MBEDTLS_PLATFORM_SNPRINTF_MACRO and MBEDTLS_PLATFORM_STD_SNPRINTF/MBEDTLS_PLATFORM_SNPRINTF_ALT cannot be defined simultaneously" 589 #endif 590 591 #if defined(MBEDTLS_PLATFORM_VSNPRINTF_ALT) && !defined(MBEDTLS_PLATFORM_C) 592 #error "MBEDTLS_PLATFORM_VSNPRINTF_ALT defined, but not all prerequisites" 593 #endif 594 595 #if defined(MBEDTLS_PLATFORM_VSNPRINTF_MACRO) && !defined(MBEDTLS_PLATFORM_C) 596 #error "MBEDTLS_PLATFORM_VSNPRINTF_MACRO defined, but not all prerequisites" 597 #endif 598 599 #if defined(MBEDTLS_PLATFORM_VSNPRINTF_MACRO) &&\ 600 ( defined(MBEDTLS_PLATFORM_STD_VSNPRINTF) ||\ 601 defined(MBEDTLS_PLATFORM_VSNPRINTF_ALT) ) 602 #error "MBEDTLS_PLATFORM_VSNPRINTF_MACRO and MBEDTLS_PLATFORM_STD_VSNPRINTF/MBEDTLS_PLATFORM_VSNPRINTF_ALT cannot be defined simultaneously" 603 #endif 604 605 #if defined(MBEDTLS_PLATFORM_STD_MEM_HDR) &&\ 606 !defined(MBEDTLS_PLATFORM_NO_STD_FUNCTIONS) 607 #error "MBEDTLS_PLATFORM_STD_MEM_HDR defined, but not all prerequisites" 608 #endif 609 610 #if defined(MBEDTLS_PLATFORM_STD_CALLOC) && !defined(MBEDTLS_PLATFORM_MEMORY) 611 #error "MBEDTLS_PLATFORM_STD_CALLOC defined, but not all prerequisites" 612 #endif 613 614 #if defined(MBEDTLS_PLATFORM_STD_FREE) && !defined(MBEDTLS_PLATFORM_MEMORY) 615 #error "MBEDTLS_PLATFORM_STD_FREE defined, but not all prerequisites" 616 #endif 617 618 #if defined(MBEDTLS_PLATFORM_STD_EXIT) &&\ 619 !defined(MBEDTLS_PLATFORM_EXIT_ALT) 620 #error "MBEDTLS_PLATFORM_STD_EXIT defined, but not all prerequisites" 621 #endif 622 623 #if defined(MBEDTLS_PLATFORM_STD_TIME) &&\ 624 ( !defined(MBEDTLS_PLATFORM_TIME_ALT) ||\ 625 !defined(MBEDTLS_HAVE_TIME) ) 626 #error "MBEDTLS_PLATFORM_STD_TIME defined, but not all prerequisites" 627 #endif 628 629 #if defined(MBEDTLS_PLATFORM_STD_FPRINTF) &&\ 630 !defined(MBEDTLS_PLATFORM_FPRINTF_ALT) 631 #error "MBEDTLS_PLATFORM_STD_FPRINTF defined, but not all prerequisites" 632 #endif 633 634 #if defined(MBEDTLS_PLATFORM_STD_PRINTF) &&\ 635 !defined(MBEDTLS_PLATFORM_PRINTF_ALT) 636 #error "MBEDTLS_PLATFORM_STD_PRINTF defined, but not all prerequisites" 637 #endif 638 639 #if defined(MBEDTLS_PLATFORM_STD_SNPRINTF) &&\ 640 !defined(MBEDTLS_PLATFORM_SNPRINTF_ALT) 641 #error "MBEDTLS_PLATFORM_STD_SNPRINTF defined, but not all prerequisites" 642 #endif 643 644 #if defined(MBEDTLS_ENTROPY_NV_SEED) &&\ 645 ( !defined(MBEDTLS_PLATFORM_C) || !defined(MBEDTLS_ENTROPY_C) ) 646 #error "MBEDTLS_ENTROPY_NV_SEED defined, but not all prerequisites" 647 #endif 648 649 #if defined(MBEDTLS_PLATFORM_NV_SEED_ALT) &&\ 650 !defined(MBEDTLS_ENTROPY_NV_SEED) 651 #error "MBEDTLS_PLATFORM_NV_SEED_ALT defined, but not all prerequisites" 652 #endif 653 654 #if defined(MBEDTLS_PLATFORM_STD_NV_SEED_READ) &&\ 655 !defined(MBEDTLS_PLATFORM_NV_SEED_ALT) 656 #error "MBEDTLS_PLATFORM_STD_NV_SEED_READ defined, but not all prerequisites" 657 #endif 658 659 #if defined(MBEDTLS_PLATFORM_STD_NV_SEED_WRITE) &&\ 660 !defined(MBEDTLS_PLATFORM_NV_SEED_ALT) 661 #error "MBEDTLS_PLATFORM_STD_NV_SEED_WRITE defined, but not all prerequisites" 662 #endif 663 664 #if defined(MBEDTLS_PLATFORM_NV_SEED_READ_MACRO) &&\ 665 ( defined(MBEDTLS_PLATFORM_STD_NV_SEED_READ) ||\ 666 defined(MBEDTLS_PLATFORM_NV_SEED_ALT) ) 667 #error "MBEDTLS_PLATFORM_NV_SEED_READ_MACRO and MBEDTLS_PLATFORM_STD_NV_SEED_READ cannot be defined simultaneously" 668 #endif 669 670 #if defined(MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO) &&\ 671 ( defined(MBEDTLS_PLATFORM_STD_NV_SEED_WRITE) ||\ 672 defined(MBEDTLS_PLATFORM_NV_SEED_ALT) ) 673 #error "MBEDTLS_PLATFORM_NV_SEED_WRITE_MACRO and MBEDTLS_PLATFORM_STD_NV_SEED_WRITE cannot be defined simultaneously" 674 #endif 675 676 #if defined(MBEDTLS_PSA_CRYPTO_C) && \ 677 !( ( ( defined(MBEDTLS_CTR_DRBG_C) || defined(MBEDTLS_HMAC_DRBG_C) ) && \ 678 defined(MBEDTLS_ENTROPY_C) ) || \ 679 defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG) ) 680 #error "MBEDTLS_PSA_CRYPTO_C defined, but not all prerequisites (missing RNG)" 681 #endif 682 683 #if defined(MBEDTLS_PSA_CRYPTO_C) && defined(PSA_HAVE_SOFT_BLOCK_MODE) && \ 684 defined(PSA_HAVE_SOFT_BLOCK_CIPHER) && !defined(MBEDTLS_CIPHER_C) 685 #error "MBEDTLS_PSA_CRYPTO_C defined, but not all prerequisites" 686 #endif 687 688 #if defined(MBEDTLS_PSA_CRYPTO_SPM) && !defined(MBEDTLS_PSA_CRYPTO_C) 689 #error "MBEDTLS_PSA_CRYPTO_SPM defined, but not all prerequisites" 690 #endif 691 692 #if defined(MBEDTLS_PSA_CRYPTO_SE_C) && \ 693 ! ( defined(MBEDTLS_PSA_CRYPTO_C) && \ 694 defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) ) 695 #error "MBEDTLS_PSA_CRYPTO_SE_C defined, but not all prerequisites" 696 #endif 697 698 #if defined(MBEDTLS_PSA_CRYPTO_SE_C) 699 #if defined(MBEDTLS_DEPRECATED_REMOVED) 700 #error "MBEDTLS_PSA_CRYPTO_SE_C is deprecated and will be removed in a future version of Mbed TLS" 701 #elif defined(MBEDTLS_DEPRECATED_WARNING) 702 #warning "MBEDTLS_PSA_CRYPTO_SE_C is deprecated and will be removed in a future version of Mbed TLS" 703 #endif 704 #endif /* MBEDTLS_PSA_CRYPTO_SE_C */ 705 706 #if defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) && \ 707 ! defined(MBEDTLS_PSA_CRYPTO_C) 708 #error "MBEDTLS_PSA_CRYPTO_STORAGE_C defined, but not all prerequisites" 709 #endif 710 711 #if defined(MBEDTLS_PSA_INJECT_ENTROPY) && \ 712 !( defined(MBEDTLS_PSA_CRYPTO_STORAGE_C) && \ 713 defined(MBEDTLS_ENTROPY_NV_SEED) ) 714 #error "MBEDTLS_PSA_INJECT_ENTROPY defined, but not all prerequisites" 715 #endif 716 717 #if defined(MBEDTLS_PSA_INJECT_ENTROPY) && \ 718 !defined(MBEDTLS_NO_DEFAULT_ENTROPY_SOURCES) 719 #error "MBEDTLS_PSA_INJECT_ENTROPY is not compatible with actual entropy sources" 720 #endif 721 722 #if defined(MBEDTLS_PSA_INJECT_ENTROPY) && \ 723 defined(MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG) 724 #error "MBEDTLS_PSA_INJECT_ENTROPY is not compatible with MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG" 725 #endif 726 727 #if defined(MBEDTLS_PSA_ITS_FILE_C) && \ 728 !defined(MBEDTLS_FS_IO) 729 #error "MBEDTLS_PSA_ITS_FILE_C defined, but not all prerequisites" 730 #endif 731 732 #if defined(MBEDTLS_RSA_C) && ( !defined(MBEDTLS_BIGNUM_C) || \ 733 !defined(MBEDTLS_OID_C) ) 734 #error "MBEDTLS_RSA_C defined, but not all prerequisites" 735 #endif 736 737 #if defined(MBEDTLS_RSA_C) && ( !defined(MBEDTLS_PKCS1_V21) && \ 738 !defined(MBEDTLS_PKCS1_V15) ) 739 #error "MBEDTLS_RSA_C defined, but none of the PKCS1 versions enabled" 740 #endif 741 742 #if defined(MBEDTLS_X509_RSASSA_PSS_SUPPORT) && \ 743 ( !defined(MBEDTLS_RSA_C) || !defined(MBEDTLS_PKCS1_V21) ) 744 #error "MBEDTLS_X509_RSASSA_PSS_SUPPORT defined, but not all prerequisites" 745 #endif 746 747 #if defined(MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT) && \ 748 defined(MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY) 749 #error "Must only define one of MBEDTLS_SHA512_USE_A64_CRYPTO_*" 750 #endif 751 752 #if defined(MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT) || \ 753 defined(MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY) 754 #if !defined(MBEDTLS_SHA512_C) 755 #error "MBEDTLS_SHA512_USE_A64_CRYPTO_* defined without MBEDTLS_SHA512_C" 756 #endif 757 #if defined(MBEDTLS_SHA512_ALT) || defined(MBEDTLS_SHA512_PROCESS_ALT) 758 #error "MBEDTLS_SHA512_*ALT can't be used with MBEDTLS_SHA512_USE_A64_CRYPTO_*" 759 #endif 760 761 #endif /* MBEDTLS_SHA512_USE_A64_CRYPTO_IF_PRESENT || MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY */ 762 763 #if defined(MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY) && !defined(__aarch64__) 764 #error "MBEDTLS_SHA512_USE_A64_CRYPTO_ONLY defined on non-Aarch64 system" 765 #endif 766 767 #if defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT) && \ 768 defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY) 769 #error "Must only define one of MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_*" 770 #endif 771 772 #if defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_IF_PRESENT) || \ 773 defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY) 774 #if !defined(MBEDTLS_SHA256_C) 775 #error "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_* defined without MBEDTLS_SHA256_C" 776 #endif 777 #if defined(MBEDTLS_SHA256_ALT) || defined(MBEDTLS_SHA256_PROCESS_ALT) 778 #error "MBEDTLS_SHA256_*ALT can't be used with MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_*" 779 #endif 780 781 #endif 782 783 #if defined(MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY) && !defined(MBEDTLS_ARCH_IS_ARMV8_A) 784 #error "MBEDTLS_SHA256_USE_ARMV8_A_CRYPTO_ONLY defined on non-Armv8-A system" 785 #endif 786 787 /* TLS 1.3 requires separate HKDF parts from PSA, 788 * and at least one ciphersuite, so at least SHA-256 or SHA-384 789 * from PSA to use with HKDF. 790 * 791 * Note: for dependencies common with TLS 1.2 (running handshake hash), 792 * see MBEDTLS_SSL_TLS_C. */ 793 #if defined(MBEDTLS_SSL_PROTO_TLS1_3) && \ 794 !(defined(MBEDTLS_PSA_CRYPTO_CLIENT) && \ 795 defined(PSA_WANT_ALG_HKDF_EXTRACT) && \ 796 defined(PSA_WANT_ALG_HKDF_EXPAND) && \ 797 (defined(PSA_WANT_ALG_SHA_256) || defined(PSA_WANT_ALG_SHA_384))) 798 #error "MBEDTLS_SSL_PROTO_TLS1_3 defined, but not all prerequisites" 799 #endif 800 801 #if defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED) 802 #if !( (defined(PSA_WANT_ALG_ECDH) || defined(PSA_WANT_ALG_FFDH)) && \ 803 defined(MBEDTLS_X509_CRT_PARSE_C) && \ 804 ( defined(MBEDTLS_PK_CAN_ECDSA_SIGN) || defined(MBEDTLS_PKCS1_V21) ) ) 805 #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED defined, but not all prerequisites" 806 #endif 807 #endif 808 809 #if defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED) 810 #if !( defined(PSA_WANT_ALG_ECDH) || defined(PSA_WANT_ALG_FFDH) ) 811 #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED defined, but not all prerequisites" 812 #endif 813 #endif 814 815 /* 816 * The current implementation of TLS 1.3 requires MBEDTLS_SSL_KEEP_PEER_CERTIFICATE. 817 */ 818 #if defined(MBEDTLS_SSL_PROTO_TLS1_3) && !defined(MBEDTLS_SSL_KEEP_PEER_CERTIFICATE) 819 #error "MBEDTLS_SSL_PROTO_TLS1_3 defined without MBEDTLS_SSL_KEEP_PEER_CERTIFICATE" 820 #endif 821 822 #if defined(MBEDTLS_SSL_PROTO_TLS1_2) && \ 823 !(defined(MBEDTLS_KEY_EXCHANGE_RSA_ENABLED) || \ 824 defined(MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED) || \ 825 defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED) || \ 826 defined(MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED) || \ 827 defined(MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED) || \ 828 defined(MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED) || \ 829 defined(MBEDTLS_KEY_EXCHANGE_PSK_ENABLED) || \ 830 defined(MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED) || \ 831 defined(MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED) || \ 832 defined(MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED) || \ 833 defined(MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED) ) 834 #error "One or more versions of the TLS protocol are enabled " \ 835 "but no key exchange methods defined with MBEDTLS_KEY_EXCHANGE_xxxx" 836 #endif 837 838 #if defined(MBEDTLS_SSL_EARLY_DATA) && \ 839 ( !defined(MBEDTLS_SSL_SESSION_TICKETS) || \ 840 ( !defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED) && \ 841 !defined(MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED) ) ) 842 #error "MBEDTLS_SSL_EARLY_DATA defined, but not all prerequisites" 843 #endif 844 845 #if defined(MBEDTLS_SSL_EARLY_DATA) && defined(MBEDTLS_SSL_SRV_C) && \ 846 defined(MBEDTLS_SSL_MAX_EARLY_DATA_SIZE) && \ 847 ((MBEDTLS_SSL_MAX_EARLY_DATA_SIZE < 0) || \ 848 (MBEDTLS_SSL_MAX_EARLY_DATA_SIZE > UINT32_MAX)) 849 #error "MBEDTLS_SSL_MAX_EARLY_DATA_SIZE must be in the range(0..UINT32_MAX)" 850 #endif 851 852 #if defined(MBEDTLS_SSL_PROTO_DTLS) && \ 853 !defined(MBEDTLS_SSL_PROTO_TLS1_2) 854 #error "MBEDTLS_SSL_PROTO_DTLS defined, but not all prerequisites" 855 #endif 856 857 #if defined(MBEDTLS_SSL_CLI_C) && !defined(MBEDTLS_SSL_TLS_C) 858 #error "MBEDTLS_SSL_CLI_C defined, but not all prerequisites" 859 #endif 860 861 #if defined(MBEDTLS_SSL_ASYNC_PRIVATE) && !defined(MBEDTLS_X509_CRT_PARSE_C) 862 #error "MBEDTLS_SSL_ASYNC_PRIVATE defined, but not all prerequisites" 863 #endif 864 865 #if defined(MBEDTLS_SSL_TLS_C) && !(defined(MBEDTLS_CIPHER_C) || \ 866 defined(MBEDTLS_USE_PSA_CRYPTO)) 867 #error "MBEDTLS_SSL_TLS_C defined, but not all prerequisites" 868 #endif 869 870 /* TLS 1.2 and 1.3 require SHA-256 or SHA-384 (running handshake hash) */ 871 #if defined(MBEDTLS_SSL_TLS_C) 872 #if defined(MBEDTLS_USE_PSA_CRYPTO) 873 #if !(defined(PSA_WANT_ALG_SHA_256) || defined(PSA_WANT_ALG_SHA_384)) 874 #error "MBEDTLS_SSL_TLS_C defined, but not all prerequisites" 875 #endif 876 #else /* MBEDTLS_USE_PSA_CRYPTO */ 877 #if !defined(MBEDTLS_MD_C) || \ 878 !(defined(MBEDTLS_MD_CAN_SHA256) || defined(MBEDTLS_MD_CAN_SHA384)) 879 #error "MBEDTLS_SSL_TLS_C defined, but not all prerequisites" 880 #endif 881 #endif /* MBEDTLS_USE_PSA_CRYPTO */ 882 #endif /* MBEDTLS_SSL_TLS_C */ 883 884 #if defined(MBEDTLS_SSL_SRV_C) && !defined(MBEDTLS_SSL_TLS_C) 885 #error "MBEDTLS_SSL_SRV_C defined, but not all prerequisites" 886 #endif 887 888 #if defined(MBEDTLS_SSL_TLS_C) && \ 889 !( defined(MBEDTLS_SSL_PROTO_TLS1_2) || defined(MBEDTLS_SSL_PROTO_TLS1_3) ) 890 #error "MBEDTLS_SSL_TLS_C defined, but no protocols are active" 891 #endif 892 893 #if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY) && !defined(MBEDTLS_SSL_PROTO_DTLS) 894 #error "MBEDTLS_SSL_DTLS_HELLO_VERIFY defined, but not all prerequisites" 895 #endif 896 897 #if defined(MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE) && \ 898 !defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY) 899 #error "MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE defined, but not all prerequisites" 900 #endif 901 902 #if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY) && \ 903 ( !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_PROTO_DTLS) ) 904 #error "MBEDTLS_SSL_DTLS_ANTI_REPLAY defined, but not all prerequisites" 905 #endif 906 907 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID) && \ 908 ( !defined(MBEDTLS_SSL_TLS_C) || !defined(MBEDTLS_SSL_PROTO_DTLS) ) 909 #error "MBEDTLS_SSL_DTLS_CONNECTION_ID defined, but not all prerequisites" 910 #endif 911 912 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID) && \ 913 defined(MBEDTLS_SSL_CID_IN_LEN_MAX) && \ 914 MBEDTLS_SSL_CID_IN_LEN_MAX > 255 915 #error "MBEDTLS_SSL_CID_IN_LEN_MAX too large (max 255)" 916 #endif 917 918 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID) && \ 919 defined(MBEDTLS_SSL_CID_OUT_LEN_MAX) && \ 920 MBEDTLS_SSL_CID_OUT_LEN_MAX > 255 921 #error "MBEDTLS_SSL_CID_OUT_LEN_MAX too large (max 255)" 922 #endif 923 924 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT) && \ 925 !defined(MBEDTLS_SSL_DTLS_CONNECTION_ID) 926 #error "MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT defined, but not all prerequisites" 927 #endif 928 929 #if defined(MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT) && MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT != 0 930 #if defined(MBEDTLS_DEPRECATED_REMOVED) 931 #error "MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT is deprecated and will be removed in a future version of Mbed TLS" 932 #elif defined(MBEDTLS_DEPRECATED_WARNING) 933 #warning "MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT is deprecated and will be removed in a future version of Mbed TLS" 934 #endif 935 #endif /* MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT && MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT != 0 */ 936 937 #if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC) && \ 938 !defined(MBEDTLS_SSL_PROTO_TLS1_2) 939 #error "MBEDTLS_SSL_ENCRYPT_THEN_MAC defined, but not all prerequisites" 940 #endif 941 942 #if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET) && \ 943 !defined(MBEDTLS_SSL_PROTO_TLS1_2) 944 #error "MBEDTLS_SSL_EXTENDED_MASTER_SECRET defined, but not all prerequisites" 945 #endif 946 947 #if defined(MBEDTLS_SSL_RENEGOTIATION) && \ 948 !defined(MBEDTLS_SSL_PROTO_TLS1_2) 949 #error "MBEDTLS_SSL_RENEGOTIATION defined, but not all prerequisites" 950 #endif 951 952 #if defined(MBEDTLS_SSL_TICKET_C) && ( !defined(MBEDTLS_CIPHER_C) && \ 953 !defined(MBEDTLS_USE_PSA_CRYPTO) ) 954 #error "MBEDTLS_SSL_TICKET_C defined, but not all prerequisites" 955 #endif 956 957 #if defined(MBEDTLS_SSL_TICKET_C) && \ 958 !( defined(MBEDTLS_SSL_HAVE_CCM) || defined(MBEDTLS_SSL_HAVE_GCM) || \ 959 defined(MBEDTLS_SSL_HAVE_CHACHAPOLY) ) 960 #error "MBEDTLS_SSL_TICKET_C defined, but not all prerequisites" 961 #endif 962 963 #if defined(MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH) && \ 964 MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH >= 256 965 #error "MBEDTLS_SSL_TLS1_3_TICKET_NONCE_LENGTH must be less than 256" 966 #endif 967 968 #if defined(MBEDTLS_SSL_SERVER_NAME_INDICATION) && \ 969 !defined(MBEDTLS_X509_CRT_PARSE_C) 970 #error "MBEDTLS_SSL_SERVER_NAME_INDICATION defined, but not all prerequisites" 971 #endif 972 973 #if defined(MBEDTLS_THREADING_PTHREAD) 974 #if !defined(MBEDTLS_THREADING_C) || defined(MBEDTLS_THREADING_IMPL) 975 #error "MBEDTLS_THREADING_PTHREAD defined, but not all prerequisites" 976 #endif 977 #define MBEDTLS_THREADING_IMPL // undef at the end of this paragraph 978 #endif 979 #if defined(MBEDTLS_THREADING_ALT) 980 #if !defined(MBEDTLS_THREADING_C) || defined(MBEDTLS_THREADING_IMPL) 981 #error "MBEDTLS_THREADING_ALT defined, but not all prerequisites" 982 #endif 983 #define MBEDTLS_THREADING_IMPL // undef at the end of this paragraph 984 #endif 985 #if defined(MBEDTLS_THREADING_C) && !defined(MBEDTLS_THREADING_IMPL) 986 #error "MBEDTLS_THREADING_C defined, single threading implementation required" 987 #endif 988 #undef MBEDTLS_THREADING_IMPL // temporary macro defined above 989 990 #if defined(MBEDTLS_USE_PSA_CRYPTO) && !defined(MBEDTLS_PSA_CRYPTO_CLIENT) 991 #error "MBEDTLS_USE_PSA_CRYPTO defined, but not all prerequisites" 992 #endif 993 994 #if defined(MBEDTLS_VERSION_FEATURES) && !defined(MBEDTLS_VERSION_C) 995 #error "MBEDTLS_VERSION_FEATURES defined, but not all prerequisites" 996 #endif 997 998 #if defined(MBEDTLS_X509_USE_C) && \ 999 (!defined(MBEDTLS_OID_C) || !defined(MBEDTLS_ASN1_PARSE_C) || \ 1000 !defined(MBEDTLS_PK_PARSE_C) || \ 1001 ( !defined(MBEDTLS_MD_C) && !defined(MBEDTLS_USE_PSA_CRYPTO) ) ) 1002 #error "MBEDTLS_X509_USE_C defined, but not all prerequisites" 1003 #endif 1004 1005 #if defined(MBEDTLS_X509_CREATE_C) && \ 1006 (!defined(MBEDTLS_OID_C) || !defined(MBEDTLS_ASN1_WRITE_C) || \ 1007 !defined(MBEDTLS_PK_PARSE_C) || \ 1008 ( !defined(MBEDTLS_MD_C) && !defined(MBEDTLS_USE_PSA_CRYPTO) ) ) 1009 #error "MBEDTLS_X509_CREATE_C defined, but not all prerequisites" 1010 #endif 1011 1012 #if defined(MBEDTLS_X509_CRT_PARSE_C) && ( !defined(MBEDTLS_X509_USE_C) ) 1013 #error "MBEDTLS_X509_CRT_PARSE_C defined, but not all prerequisites" 1014 #endif 1015 1016 #if defined(MBEDTLS_X509_CRL_PARSE_C) && ( !defined(MBEDTLS_X509_USE_C) ) 1017 #error "MBEDTLS_X509_CRL_PARSE_C defined, but not all prerequisites" 1018 #endif 1019 1020 #if defined(MBEDTLS_X509_CSR_PARSE_C) && ( !defined(MBEDTLS_X509_USE_C) ) 1021 #error "MBEDTLS_X509_CSR_PARSE_C defined, but not all prerequisites" 1022 #endif 1023 1024 #if defined(MBEDTLS_X509_CRT_WRITE_C) && ( !defined(MBEDTLS_X509_CREATE_C) ) 1025 #error "MBEDTLS_X509_CRT_WRITE_C defined, but not all prerequisites" 1026 #endif 1027 1028 #if defined(MBEDTLS_X509_CSR_WRITE_C) && ( !defined(MBEDTLS_X509_CREATE_C) ) 1029 #error "MBEDTLS_X509_CSR_WRITE_C defined, but not all prerequisites" 1030 #endif 1031 1032 #if defined(MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK) && \ 1033 ( !defined(MBEDTLS_X509_CRT_PARSE_C) ) 1034 #error "MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK defined, but not all prerequisites" 1035 #endif 1036 1037 #if defined(MBEDTLS_HAVE_INT32) && defined(MBEDTLS_HAVE_INT64) 1038 #error "MBEDTLS_HAVE_INT32 and MBEDTLS_HAVE_INT64 cannot be defined simultaneously" 1039 #endif /* MBEDTLS_HAVE_INT32 && MBEDTLS_HAVE_INT64 */ 1040 1041 #if ( defined(MBEDTLS_HAVE_INT32) || defined(MBEDTLS_HAVE_INT64) ) && \ 1042 defined(MBEDTLS_HAVE_ASM) 1043 #error "MBEDTLS_HAVE_INT32/MBEDTLS_HAVE_INT64 and MBEDTLS_HAVE_ASM cannot be defined simultaneously" 1044 #endif /* (MBEDTLS_HAVE_INT32 || MBEDTLS_HAVE_INT64) && MBEDTLS_HAVE_ASM */ 1045 1046 #if defined(MBEDTLS_SSL_DTLS_SRTP) && ( !defined(MBEDTLS_SSL_PROTO_DTLS) ) 1047 #error "MBEDTLS_SSL_DTLS_SRTP defined, but not all prerequisites" 1048 #endif 1049 1050 #if defined(MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH) && ( !defined(MBEDTLS_SSL_MAX_FRAGMENT_LENGTH) ) 1051 #error "MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH defined, but not all prerequisites" 1052 #endif 1053 1054 #if defined(MBEDTLS_SSL_RECORD_SIZE_LIMIT) && ( !defined(MBEDTLS_SSL_PROTO_TLS1_3) ) 1055 #error "MBEDTLS_SSL_RECORD_SIZE_LIMIT defined, but not all prerequisites" 1056 #endif 1057 1058 #if defined(MBEDTLS_SSL_CONTEXT_SERIALIZATION) && \ 1059 !( defined(MBEDTLS_SSL_HAVE_CCM) || defined(MBEDTLS_SSL_HAVE_GCM) || \ 1060 defined(MBEDTLS_SSL_HAVE_CHACHAPOLY) ) 1061 #error "MBEDTLS_SSL_CONTEXT_SERIALIZATION defined, but not all prerequisites" 1062 #endif 1063 1064 /* Reject attempts to enable options that have been removed and that could 1065 * cause a build to succeed but with features removed. */ 1066 1067 #if defined(MBEDTLS_HAVEGE_C) //no-check-names 1068 #error "MBEDTLS_HAVEGE_C was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/2599" 1069 #endif 1070 1071 #if defined(MBEDTLS_SSL_HW_RECORD_ACCEL) //no-check-names 1072 #error "MBEDTLS_SSL_HW_RECORD_ACCEL was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031" 1073 #endif 1074 1075 #if defined(MBEDTLS_SSL_PROTO_SSL3) //no-check-names 1076 #error "MBEDTLS_SSL_PROTO_SSL3 (SSL v3.0 support) was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031" 1077 #endif 1078 1079 #if defined(MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO) //no-check-names 1080 #error "MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO (SSL v2 ClientHello support) was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031" 1081 #endif 1082 1083 #if defined(MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT) //no-check-names 1084 #error "MBEDTLS_SSL_TRUNCATED_HMAC_COMPAT (compatibility with the buggy implementation of truncated HMAC in Mbed TLS up to 2.7) was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031" 1085 #endif 1086 1087 #if defined(MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES) //no-check-names 1088 #error "MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES was removed in Mbed TLS 3.0. See the ChangeLog entry if you really need SHA-1-signed certificates." 1089 #endif 1090 1091 #if defined(MBEDTLS_ZLIB_SUPPORT) //no-check-names 1092 #error "MBEDTLS_ZLIB_SUPPORT was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4031" 1093 #endif 1094 1095 #if defined(MBEDTLS_CHECK_PARAMS) //no-check-names 1096 #error "MBEDTLS_CHECK_PARAMS was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4313" 1097 #endif 1098 1099 #if defined(MBEDTLS_SSL_CID_PADDING_GRANULARITY) //no-check-names 1100 #error "MBEDTLS_SSL_CID_PADDING_GRANULARITY was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4335" 1101 #endif 1102 1103 #if defined(MBEDTLS_SSL_TLS1_3_PADDING_GRANULARITY) //no-check-names 1104 #error "MBEDTLS_SSL_TLS1_3_PADDING_GRANULARITY was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4335" 1105 #endif 1106 1107 #if defined(MBEDTLS_SSL_TRUNCATED_HMAC) //no-check-names 1108 #error "MBEDTLS_SSL_TRUNCATED_HMAC was removed in Mbed TLS 3.0. See https://github.com/Mbed-TLS/mbedtls/issues/4341" 1109 #endif 1110 1111 #if defined(MBEDTLS_PKCS7_C) && ( ( !defined(MBEDTLS_ASN1_PARSE_C) ) || \ 1112 ( !defined(MBEDTLS_OID_C) ) || ( !defined(MBEDTLS_PK_PARSE_C) ) || \ 1113 ( !defined(MBEDTLS_X509_CRT_PARSE_C) ) || \ 1114 ( !defined(MBEDTLS_X509_CRL_PARSE_C) ) || \ 1115 ( !defined(MBEDTLS_MD_C) ) ) 1116 #error "MBEDTLS_PKCS7_C is defined, but not all prerequisites" 1117 #endif 1118 1119 /* 1120 * Avoid warning from -pedantic. This is a convenient place for this 1121 * workaround since this is included by every single file before the 1122 * #if defined(MBEDTLS_xxx_C) that results in empty translation units. 1123 */ 1124 typedef int mbedtls_iso_c_forbids_empty_translation_units; 1125 1126 /* *INDENT-ON* */ 1127 #endif /* MBEDTLS_CHECK_CONFIG_H */ 1128
