Tfm test

applications/serial_lte_modem/overlay-native_tls.conf

@@ -38,6 +38,8 @@ CONFIG_MBEDTLS_SSL_SERVER_NAME_INDICATION=y
 CONFIG_MBEDTLS_AES_C=y
 CONFIG_MBEDTLS_CCM_C=y
 CONFIG_MBEDTLS_GCM_C=y
+CONFIG_MBEDTLS_CIPHER_MODE_CBC=y
+CONFIG_MBEDTLS_CIPHER_PADDING_PKCS7=y
 # Enable ECC
 CONFIG_MBEDTLS_ECP_C=y
 CONFIG_PSA_WANT_ECC_SECP_R1_256=y
@@ -56,10 +58,13 @@ CONFIG_PSA_WANT_ALG_ECDH=y
 CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED=y
 CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED=y
 # Enable RSA
-CONFIG_MBEDTLS_KEY_EXCHANGE_RSA_ENABLED=y
 CONFIG_MBEDTLS_RSA_C=y
+CONFIG_MBEDTLS_KEY_EXCHANGE_RSA_ENABLED=y
 CONFIG_MBEDTLS_PKCS1_V15=y
 CONFIG_MBEDTLS_MPI_MAX_SIZE=512
+CONFIG_PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY=y
+CONFIG_PSA_WANT_RSA_KEY_SIZE_2048=y
+CONFIG_PSA_WANT_RSA_KEY_SIZE_4096=y
 # Enable SHA
 CONFIG_MBEDTLS_SHA256_C=y
 CONFIG_MBEDTLS_SHA512_C=y

doc/nrf/libraries/nrf_security/doc/mbed_tls_header.rst

@@ -16,8 +16,6 @@ Complete the following steps:
 
    * `CONFIG_GENERATE_MBEDTLS_CFG_FILE=n`.
    * `CONFIG_MBEDTLS_CFG_FILE="custom-name-nrf-config.h"`.
-   * `CONFIG_MBEDTLS_USER_CONFIG_FILE="empty_file.h"`.
-#. Create an empty file named :file:`empty_file.h`.
 #. Edit :file:`custom-name-nrf-config.h` with your custom configuration.
 #. If the header files are not already in the include path, add them by editing the application build scripts.