mirror of
https://github.com/MariaDB/server.git
synced 2025-01-27 09:14:17 +01:00
d510f80549
- Use "new" math library WOLFSSL_SP_MATH_ALL, which is now promoted by WolfSSL for faster performance. "fastmath" we used previously is going to be deprecated, it was not really always fast. - Optimize common RSA math operations with WOLFSSL_HAVE_SP_RSA - Incorporate assembly optimizations, currently for Intel x64 only This patch significantly reduces execution time for SSL tests like main.ssl-big and main.ssl_connect, which now run 2 to 3 times faster. Notably, when this patch is applied to 11.4, server startup in with ephemeral certificates becomes approximately 10x faster due to optimized wolfSSL_EVP_PKEY_keygen(). Additionally, refactored WolfSSL by removing old workarounds and consolidating wolfssl and wolfcrypt into a single library wolfssl, just like it was done in WolfSSL's own CMake.
70 lines
1.6 KiB
C
70 lines
1.6 KiB
C
#ifndef WOLFSSL_USER_SETTINGS_H
|
|
#define WOLFSSL_USER_SETTINGS_H
|
|
|
|
#define HAVE_CRL
|
|
#define WOLFSSL_HAVE_ERROR_QUEUE
|
|
#define WOLFSSL_MYSQL_COMPATIBLE
|
|
#define HAVE_ECC
|
|
#define ECC_TIMING_RESISTANT
|
|
#define HAVE_HASHDRBG
|
|
#define WOLFSSL_AES_DIRECT
|
|
#define WOLFSSL_SHA384
|
|
#define WOLFSSL_SHA512
|
|
#define WOLFSSL_SHA224
|
|
#define SESSION_CERT
|
|
#define KEEP_OUR_CERT
|
|
#define WOLFSSL_STATIC_RSA
|
|
#define WOLFSSL_USER_IO
|
|
#define WC_RSA_BLINDING
|
|
#define HAVE_TLS_EXTENSIONS
|
|
#define HAVE_AES_ECB
|
|
#define HAVE_AESGCM
|
|
#define HAVE_CHACHA
|
|
#define HAVE_POLY1305
|
|
#define HAVE_THREAD_LS
|
|
#define WOLFSSL_AES_COUNTER
|
|
#define NO_WOLFSSL_STUB
|
|
#define OPENSSL_ALL
|
|
#define WOLFSSL_ALLOW_TLSV10
|
|
#define NO_OLD_TIMEVAL_NAME
|
|
#define HAVE_SECURE_RENEGOTIATION
|
|
#define HAVE_EXTENDED_MASTER
|
|
/*
|
|
Following is workaround about a WolfSSL 5.6.6 bug.
|
|
The bug is about undefined sessionCtxSz during compilation.
|
|
*/
|
|
#define WOLFSSL_SESSION_ID_CTX
|
|
|
|
/* TLSv1.3 definitions (all needed to build) */
|
|
#define WOLFSSL_TLS13
|
|
#define HAVE_HKDF
|
|
#define HAVE_TLS_EXTENSIONS
|
|
#define HAVE_SUPPORTED_CURVES
|
|
#define HAVE_FFDHE_2048
|
|
#define WC_RSA_PSS
|
|
/* End of TLSv1.3 defines */
|
|
|
|
/* Features we exclude */
|
|
#define NO_DSA
|
|
#define NO_HC128
|
|
#define NO_MD4
|
|
#define NO_PSK
|
|
#define NO_RABBIT
|
|
#define NO_RC4
|
|
|
|
#define RSA_MAX_SIZE 8192
|
|
#define WOLFSSL_SP_MATH_ALL
|
|
#define WOLFSSL_HAVE_SP_RSA
|
|
#ifndef WOLFSSL_SP_4096
|
|
#define WOLFSSL_SP_4096
|
|
#endif
|
|
|
|
#cmakedefine WOLFSSL_AESNI
|
|
#cmakedefine HAVE_INTEL_RDSEED
|
|
#cmakedefine HAVE_INTEL_RDRAND
|
|
#cmakedefine USE_INTEL_SPEEDUP
|
|
#cmakedefine WOLFSSL_X86_64_BUILD
|
|
#cmakedefine WOLFSSL_SP_X86_64
|
|
#cmakedefine WOLFSSL_SP_X86_64_ASM
|
|
|
|
#endif /* WOLFSSL_USER_SETTINGS_H */
|