From a372f1a5cb073fde69ca27bb46ea946dc2941570 Mon Sep 17 00:00:00 2001 From: Valerio Setti Date: Thu, 12 Feb 2026 22:09:06 +0100 Subject: [PATCH] library: check_crypto_config: remove redundant check on hash algorithms for TLS 1.2 TLS-PRF uses either SHA-256 and SHA-384, so the removed paragraph was not correct. The correct version is already available in "check_config.h". Signed-off-by: Valerio Setti --- library/check_crypto_config.h | 5 ----- 1 file changed, 5 deletions(-) diff --git a/library/check_crypto_config.h b/library/check_crypto_config.h index 6469e9f439..f1ed7f53ee 100644 --- a/library/check_crypto_config.h +++ b/library/check_crypto_config.h @@ -128,11 +128,6 @@ #error "PSA_WANT_KEY_TYPE_DH_KEY_PAIR_DERIVE defined, but feature is not supported" #endif -#if defined(MBEDTLS_SSL_PROTO_TLS1_2) && defined(MBEDTLS_USE_PSA_CRYPTO) && \ - !(defined(PSA_WANT_ALG_SHA_1) || defined(PSA_WANT_ALG_SHA_256) || defined(PSA_WANT_ALG_SHA_512)) -#error "MBEDTLS_SSL_PROTO_TLS1_2 defined, but not all prerequisites" -#endif - #if defined(PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS) && \ !defined(PSA_WANT_ALG_SHA_256) #error "PSA_WANT_ALG_TLS12_ECJPAKE_TO_PMS defined, but not all prerequisites"