wolfCert/examples/user_settings.h.example at main · wolfSSL/wolfCert · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
/*
 * Copyright (C) 2026 wolfSSL Inc.
 *
 * This file is part of wolfCert.
 *
 * wolfCert is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * wolfCert is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with wolfCert.  If not, see <http://www.gnu.org/licenses/>.
 */

/*
 * Template user_settings.h, read in place of the generated options.h. Copy
 * it to "user_settings.h" on the include path and build wolfCert and the
 * application with -DWOLFCERT_USER_SETTINGS. See docs/EMBEDDED.md.
 *
 * Disable a feature by commenting its line out. The code tests with #ifdef,
 * so "#define WOLFCERT_HAVE_X 0" still enables it.
 *
 * wolfSSL's WOLFSSL_USER_SETTINGS macros can live in this same file. Both
 * libraries include "user_settings.h" unqualified, so only one file by that
 * name may be on the include path.
 */

#ifndef WOLFCERT_USER_SETTINGS_H
#define WOLFCERT_USER_SETTINGS_H

/* Protocols */
#define WOLFCERT_HAVE_EST    1   /* EST  (RFC 7030) */
#define WOLFCERT_HAVE_SCEP   1   /* SCEP (RFC 8894) - requires WOLFCERT_HAVE_RSA */
#define WOLFCERT_HAVE_SERVER 1   /* built-in EST/SCEP test server */

/* Platform: each needs its HAVE or WOLFCERT_NO_* form; NO_* compiles the
 * backend out and the application supplies its own transport / store ops. */
#define WOLFCERT_HAVE_POSIX_STORE 1
#define WOLFCERT_HAVE_BUILTIN_TRANSPORT 1

/* Key algorithms (at least one) */
#define WOLFCERT_HAVE_RSA     1
#define WOLFCERT_HAVE_ECC     1
#define WOLFCERT_HAVE_ED25519 1
#define WOLFCERT_HAVE_ED448   1
#define WOLFCERT_HAVE_MLDSA   1

/* wolfSSL setting for a hosted target sharing this file: makes the error
 * state per-thread (wolfSSL ignores it on FreeRTOS and Zephyr). */
/* #define HAVE_THREAD_LS */

#endif /* WOLFCERT_USER_SETTINGS_H */