Espressif ESP32-S2 Programming Manual page 1206

Chapter 2. API Reference
CONFIG_MBEDTLS_SSL_PROTO_GMTSSL1_1
Support GM/T SSL 1.1 protocol
Found in: Component config
Provisions for GM/T SSL 1.1 support
Default value:
• No (disabled)
CONFIG_MBEDTLS_SSL_PROTO_DTLS
Support DTLS protocol (all versions)
Found in: Component config
Requires TLS 1.1 to be enabled for DTLS 1.0 Requires TLS 1.2 to be enabled for DTLS 1.2
Default value:
• No (disabled)
CONFIG_MBEDTLS_SSL_ALPN
Support ALPN (Application Layer Protocol Negotiation)
Found in: Component config
Disabling this option will save some code size if it is not needed.
Default value:
• Yes (enabled)
CONFIG_MBEDTLS_CLIENT_SSL_SESSION_TICKETS
TLS: Client Support for RFC 5077 SSL session tickets
Found in: Component config
Client support for RFC 5077 session tickets. See mbedTLS documentation for more details. Disabling
this option will save some code size.
Default value:
• Yes (enabled)
CONFIG_MBEDTLS_X509_CHECK_KEY_USAGE
Enable verification of the keyUsage extension
Found in: Component config
Disabling this avoids problems with mis-issued and/or misused (intermediate) CA and leaf certificates.
Depending on your PKI use, disabling this can be a security risk.
Default value:
• Yes (enabled)
CONFIG_MBEDTLS_X509_CHECK_EXTENDED_KEY_USAGE
Enable verification of the extendedKeyUsage extension
Found in: Component config
Disabling this avoids problems with mis-issued and/or misused certificates. Depending on your PKI use,
disabling this can be a security risk.
Default value:
Espressif Systems
> mbedTLS
> mbedTLS
> mbedTLS
> mbedTLS
> mbedTLS
> mbedTLS
1195
Submit Document Feedback
Release v4.4