1CONFIG_LWM2M_DTLS_SUPPORT=y 2CONFIG_LWM2M_PEER_PORT=5684 3 4# I need room to store certificates 5CONFIG_LWM2M_SECURITY_KEY_SIZE=2048 6 7# Select Zephyr mbedtls 8CONFIG_MBEDTLS=y 9CONFIG_MBEDTLS_TLS_VERSION_1_2=y 10 11# Special MbedTLS changes 12CONFIG_MBEDTLS_ENABLE_HEAP=y 13CONFIG_MBEDTLS_HEAP_SIZE=32768 14CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=1500 15CONFIG_MBEDTLS_CIPHER_CCM_ENABLED=y 16 17# Disable RSA, use only ECC certificates 18CONFIG_MBEDTLS_KEY_EXCHANGE_RSA_ENABLED=n 19# Enable PSK and ECDHE_ECDSA 20CONFIG_MBEDTLS_KEY_EXCHANGE_PSK_ENABLED=y 21CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED=y 22# We only need prime256v1 curve 23CONFIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED=y 24CONFIG_MBEDTLS_ECDH_C=y 25CONFIG_MBEDTLS_ECDSA_C=y 26CONFIG_MBEDTLS_ECP_C=y 27CONFIG_MBEDTLS_CIPHER_CCM_ENABLED=y 28CONFIG_MBEDTLS_CIPHER_GCM_ENABLED=y 29# Optional: we could use just binary DER certificates 30CONFIG_MBEDTLS_PEM_CERTIFICATE_FORMAT=y 31 32CONFIG_NET_SOCKETS_SOCKOPT_TLS=y 33CONFIG_NET_SOCKETS_TLS_MAX_CONTEXTS=4 34CONFIG_NET_SOCKETS_ENABLE_DTLS=y 35 36# MbedTLS needs a larger stack 37CONFIG_MAIN_STACK_SIZE=2048 38CONFIG_SYSTEM_WORKQUEUE_STACK_SIZE=2048 39
