From 52379636c5ed5e0680c72d5b05abf84e030ff5e4 Mon Sep 17 00:00:00 2001 From: Valerio Setti Date: Fri, 13 Mar 2026 14:06:17 +0100 Subject: [PATCH] library: check_config: remove RSA encryption requirement from ECDHE-RSA ECDHE-RSA only requires RSA signature, not encryption. This commits fixes guards in "mbedtls_check_config.h". Signed-off-by: Valerio Setti --- library/mbedtls_check_config.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/library/mbedtls_check_config.h b/library/mbedtls_check_config.h index f6ca813a37..e0023b6284 100644 --- a/library/mbedtls_check_config.h +++ b/library/mbedtls_check_config.h @@ -60,7 +60,7 @@ #if defined(MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED) && \ ( !defined(MBEDTLS_CAN_ECDH) || !defined(PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_BASIC) || \ - !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(PSA_WANT_ALG_RSA_PKCS1V15_CRYPT) || !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN) ) + !defined(MBEDTLS_X509_CRT_PARSE_C) || !defined(PSA_WANT_ALG_RSA_PKCS1V15_SIGN) ) #error "MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED defined, but not all prerequisites" #endif