Failed to define MBEDTLS_X509_CRT_WRITE_C even after adding appropriate configs in prj.conf file

[AR Jadhav]

Hello,

I am having nRF9160 with modem FW = 1.3.6 and nrf sdk version 2.7.0

I am using MBEDTLS library for generating self-signed & CSR certificates with EC-Key and RSA key. I am adding following configs in my prj.conf file

    MBEDTLS_X509_CSR_WRITE_C

    MBEDTLS_X509_CREATE_C

    MBEDTLS_ENTROPY_C

    MBEDTLS_CTR_DRBG_C

    MBEDTLS_PK_WRITE_C

    MBEDTLS_ZEPHYR_ENTROPY

    MBEDTLS

    MBEDTLS_ENABLE_HEAP

    MBEDTLS_TLS_LIBRARY

    MBEDTLS_X509_LIBRARY

    NRF_SECURITY_ADVANCED

    NORDIC_SECURITY_BACKEND

    MBEDTLS_DHM_C

    MBEDTLS_ECDH_C

    MBEDTLS_ECDSA_C

    MBEDTLS_ECP_C

    MBEDTLS_ECJPAKE_C

    MBEDTLS_GCM_C

    MBEDTLS_CIPHER_C

    MBEDTLS_RSA_C

    PSA_WANT_RSA_KEY_SIZE_2048

Even after enabling this configs MBEDTLS_X509_CRT_WRITE_C is not getting enabled in autoconf.h file. Because of this I am not able to compile the code and go ahead.

Can you please suggest probable reason or steps to get this resolved.

[dejans]

Hi,

Can you check if you miss any of the MbedTLS Kconfig options listed in these 2 tickets - first and second?

Best regards,
Dejan

[AR Jadhav]

dejans  Thanks for your reply.
I revisited the Kconfigs to see if I have missed anything, but it does not seem like I have missed anything.

[dejans]

Hi,

MBEDTLS_X509_CRT_WRITE_C is not auto-enabled. 
https://github.com/nrfconnect/sdk-nrf/blob/27bd6be1ccdbf4b434f450ef8eaf6e2e3a0bfe4d/subsys/nrf_security/Kconfig.tls#L66
Possibly you need MBEDTLS_X509_CRT_PARSE_C as well.
https://github.com/nrfconnect/sdk-nrf/blob/27bd6be1ccdbf4b434f450ef8eaf6e2e3a0bfe4d/subsys/nrf_security/Kconfig.tls#L54

Best regards,
Dejan

[AR Jadhav]

Thanks for the info dejans , 

I tried the above-mentioned configs. When I explicitly enable the 

CONFIG_MBEDTLS_X509_CRT_WRITE_C=y,

I am getting the error attached. It says undefined symbol 

MBEDTLS_X509_CRT_WRITE_C

[dejans]

Hi,

What is the result if you add "default y" to MBEDTLS_X509_CRT_WRITE_C in Kconfig.tls?

If you have build folder, can you try to find nrf-prefixed configuration (find | grep nrf-) and post it here.
If you do not have build folder yet, please upload your complete project configuration.

Best regards,
Dejan