Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nrf_security: kconfig: Dont enable TLS or X509 by default #14487

Closed

Conversation

SebastianBoe
Copy link
Contributor

It is bad practice for features to be enabled by default.

It is not clear to me why these should be enabled when PSA and legacy ECD* are enabled.

@github-actions github-actions bot added the changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. label Mar 12, 2024
@NordicBuilder
Copy link
Contributor

NordicBuilder commented Mar 12, 2024

Test specification

CI/Jenkins/NRF

  • Integration Platforms

CI/Jenkins/integration

Test Module File based changes Manually selected West overwrite
test-fw-nrfconnect-chip X
test-fw-nrfconnect-nrf_crypto X
test-fw-nrfconnect-tfm X
test-sdk-find-my X
test-sdk-sidewalk X
test-sdk-wifi X

test-fw-nrfconnect-chip: added because there was no .github/test-spec.yml in 'matter'

Detailed information of selected test modules

Note: This message is automatically posted and updated by the CI

@NordicBuilder
Copy link
Contributor

You can find the documentation preview for this PR at this link. It will be updated about 10 minutes after the documentation build succeeds.

Note: This comment is automatically posted by the Documentation Publishing GitHub Action.

@NordicBuilder
Copy link
Contributor

NordicBuilder commented Mar 12, 2024

The following west manifest projects have been modified in this Pull Request:

Name Old Revision New Revision Diff
matter nrfconnect/sdk-connectedhomeip@aaf6893 (master) nrfconnect/sdk-connectedhomeip#409 nrfconnect/sdk-connectedhomeip#409/files

Note: This message is automatically posted and updated by the Manifest GitHub Action.

@SebastianBoe SebastianBoe force-pushed the more_reasonable_defaults branch from cc79797 to 2d004a7 Compare March 12, 2024 15:07
@SebastianBoe SebastianBoe force-pushed the more_reasonable_defaults branch from 2d004a7 to ba2a21f Compare April 11, 2024 10:55
update matter

Signed-off-by: Sebastian Bøe <sebastian.boe@nordicsemi.no>
It is bad practice for features to be enabled by default.

It is not clear to me why these should be enabled when PSA and legacy
ECD* are enabled.

Enable PK_PARSE_C explicitly (used by
hostap/src/crypto/crypto_mbedtls-ec.c) now that legacy is disabled by
default.

Signed-off-by: Sebastian Bøe <sebastian.boe@nordicsemi.no>
@SebastianBoe SebastianBoe force-pushed the more_reasonable_defaults branch from ba2a21f to a2b23a8 Compare April 11, 2024 14:20
@SebastianBoe
Copy link
Contributor Author

I'm giving up on this.

I expect this to change significantly soon anyway.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. DNM manifest manifest-matter
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants