1# Enable DTLS with Connection Identifier
2CONFIG_LWM2M_DTLS_SUPPORT=y
3CONFIG_LWM2M_DTLS_CID=y
4CONFIG_LWM2M_PEER_PORT=5684
5
6# Select Zephyr mbedtls
7CONFIG_MBEDTLS=y
8CONFIG_MBEDTLS_TLS_VERSION_1_2=y
9CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID=y
10
11# Special MbedTLS changes
12CONFIG_MBEDTLS_ENABLE_HEAP=y
13CONFIG_MBEDTLS_HEAP_SIZE=8192
14CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=1500
15CONFIG_MBEDTLS_CIPHER_AES_ENABLED=y
16CONFIG_MBEDTLS_CIPHER_CCM_ENABLED=y
17
18# Disable RSA, we don't parse certs: saves flash/memory
19CONFIG_MBEDTLS_KEY_EXCHANGE_RSA_ENABLED=n
20# Enable PSK instead
21CONFIG_MBEDTLS_KEY_EXCHANGE_PSK_ENABLED=y
22
23CONFIG_NET_SOCKETS_SOCKOPT_TLS=y
24CONFIG_NET_SOCKETS_TLS_MAX_CONTEXTS=4
25CONFIG_NET_SOCKETS_ENABLE_DTLS=y
26
27# MbedTLS needs a larger stack
28CONFIG_MAIN_STACK_SIZE=2048
29CONFIG_SYSTEM_WORKQUEUE_STACK_SIZE=2048
30
31# This has to be match length of LWM2M_APP_ID and if LWM2M_APP_ID is empty,
32# then this has to be match length of CONFIG_BOARD. Default 16 is not enough
33# for some boards, so, increase it to 32.
34CONFIG_LWM2M_SECURITY_KEY_SIZE=32
35