When subtracting classic symbols from full, turn off PSA_CRYPTO_CONFIG

Otherwise unwanted algorithms creep back from the default-on PSA_WANT
symbols.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2023-07-20 20:11:51 +02:00
parent 7eea4a7a80
commit 884b462044
2 changed files with 4 additions and 0 deletions

View file

@ -1440,6 +1440,7 @@ component_test_sw_inet_pton () {
component_test_crypto_full_md_light_only () { component_test_crypto_full_md_light_only () {
msg "build: crypto_full with only the light subset of MD" msg "build: crypto_full with only the light subset of MD"
scripts/config.py crypto_full scripts/config.py crypto_full
scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
# Disable MD # Disable MD
scripts/config.py unset MBEDTLS_MD_C scripts/config.py unset MBEDTLS_MD_C
# Disable direct dependencies of MD_C # Disable direct dependencies of MD_C
@ -1479,6 +1480,7 @@ component_test_full_no_cipher () {
scripts/config.py unset MBEDTLS_SSL_TICKET_C scripts/config.py unset MBEDTLS_SSL_TICKET_C
# Indirect dependencies # Indirect dependencies
scripts/config.py unset MBEDTLS_SSL_CLI_C scripts/config.py unset MBEDTLS_SSL_CLI_C
scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
scripts/config.py unset MBEDTLS_SSL_DTLS_ANTI_REPLAY scripts/config.py unset MBEDTLS_SSL_DTLS_ANTI_REPLAY
@ -1508,6 +1510,7 @@ component_test_crypto_full_no_cipher () {
scripts/config.py unset MBEDTLS_PKCS5_C scripts/config.py unset MBEDTLS_PKCS5_C
scripts/config.py unset MBEDTLS_PSA_CRYPTO_C scripts/config.py unset MBEDTLS_PSA_CRYPTO_C
# Indirect dependencies # Indirect dependencies
scripts/config.py unset MBEDTLS_PSA_CRYPTO_CONFIG
scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C scripts/config.py unset MBEDTLS_PSA_CRYPTO_SE_C
scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C scripts/config.py unset MBEDTLS_PSA_CRYPTO_STORAGE_C
scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO scripts/config.py unset MBEDTLS_USE_PSA_CRYPTO

View file

@ -161,6 +161,7 @@ derived."""
log_command(['config.py', 'full']) log_command(['config.py', 'full'])
conf.adapt(config.full_adapter) conf.adapt(config.full_adapter)
set_config_option_value(conf, 'MBEDTLS_TEST_HOOKS', colors, False) set_config_option_value(conf, 'MBEDTLS_TEST_HOOKS', colors, False)
set_config_option_value(conf, 'MBEDTLS_PSA_CRYPTO_CONFIG', colors, False)
if options.unset_use_psa: if options.unset_use_psa:
set_config_option_value(conf, 'MBEDTLS_USE_PSA_CRYPTO', colors, False) set_config_option_value(conf, 'MBEDTLS_USE_PSA_CRYPTO', colors, False)