Chapter 2. API Reference
CONFIG_MBEDTLS_KEY_EXCHANGE_ECJPAKE
Enable ECJPAKE based ciphersuite modes
Found in:
Component config
Enable to support ciphersuites with prefix TLS-ECJPAKE-WITH-
Default value:
• No
FIG_MBEDTLS_ECP_DP_SECP256R1_ENABLED
CONFIG_MBEDTLS_SSL_RENEGOTIATION
Support TLS renegotiation
Found in:
Component config
The two main uses of renegotiation are (1) refresh keys on long-lived connections and (2) client authen-
tication after the initial handshake. If you don't need renegotiation, disabling it will save code size and
reduce the possibility of abuse/vulnerability.
Default value:
• Yes (enabled)
CONFIG_MBEDTLS_SSL_PROTO_SSL3
Legacy SSL 3.0 support
Found in:
Component config
Support the legacy SSL 3.0 protocol. Most servers will speak a newer TLS protocol these days.
Default value:
• No (disabled)
CONFIG_MBEDTLS_SSL_PROTO_TLS1
Support TLS 1.0 protocol
Found in:
Component config
Default value:
• Yes (enabled)
CONFIG_MBEDTLS_SSL_PROTO_TLS1_1
Support TLS 1.1 protocol
Found in:
Component config
Default value:
• Yes (enabled)
CONFIG_MBEDTLS_SSL_PROTO_TLS1_2
Support TLS 1.2 protocol
Found in:
Component config
Default value:
• Yes (enabled)
Espressif Systems
>
mbedTLS
>
TLS Key Exchange Methods
(disabled)
if
CONFIG_MBEDTLS_ECJPAKE_C
>
mbedTLS
>
mbedTLS
>
mbedTLS
>
mbedTLS
>
mbedTLS
Submit Document Feedback
1194
&&
CON-
Release v4.4
Need help?
Do you have a question about the ESP32-S2 and is the answer not in the manual?