Skip to content

Commit e9561f0

Browse files
author
Mika Tervonen
committed
Removed mbedTLS internal include file
Disabled non blocking ECC from border router as there is no public API
1 parent fe812c3 commit e9561f0

File tree

1 file changed

+6
-9
lines changed

1 file changed

+6
-9
lines changed

source/Security/protocols/tls_sec_prot/tls_sec_prot_lib.c

Lines changed: 6 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -51,8 +51,6 @@
5151
#include "mbedtls/debug.h"
5252
#include "mbedtls/oid.h"
5353

54-
#include "mbedtls/ssl_internal.h"
55-
5654
#define TRACE_GROUP "tlsl"
5755

5856
#define TLS_HANDSHAKE_TIMEOUT_MIN 25000
@@ -373,13 +371,12 @@ int8_t tls_sec_prot_lib_connect(tls_security_t *sec, bool is_server, const sec_p
373371
// Set certificate verify callback
374372
mbedtls_ssl_set_verify(&sec->ssl, tls_sec_prot_lib_x509_crt_verify, sec);
375373

376-
#ifdef MBEDTLS_ECP_RESTARTABLE
377-
if (is_server_is_set) {
378-
// Temporary to enable non blocking ECC */
379-
sec->ssl.handshake->ecrs_enabled = 1;
380-
}
381-
#endif
382-
374+
/* Currently assuming we are running fast enough HW that ECC calculations are not blocking any normal operation.
375+
*
376+
* If there is a problem with ECC calculations and those are taking too long in border router
377+
* MBEDTLS_ECP_RESTARTABLE feature needs to be enabled and public API is needed to allow it in border router
378+
* enabling should be done here.
379+
*/
383380
return 0;
384381
}
385382

0 commit comments

Comments
 (0)