From 2e095d7c22c3fc6ea263a13d2ac9300751b478fc Mon Sep 17 00:00:00 2001 From: Ravi Dondaputi Date: Tue, 16 Sep 2025 13:20:39 +0530 Subject: [PATCH 1/2] net: lib: hostap_crypto: Enable ECP configs Enable ECP crypto support when enterprise security is used. This is needed for WFA certification cases. Fixes SHEL-3648. Signed-off-by: Ravi Dondaputi --- subsys/net/lib/hostap_crypto/Kconfig | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/subsys/net/lib/hostap_crypto/Kconfig b/subsys/net/lib/hostap_crypto/Kconfig index 0cb3eb5e55c2..26d84af96fdd 100644 --- a/subsys/net/lib/hostap_crypto/Kconfig +++ b/subsys/net/lib/hostap_crypto/Kconfig @@ -93,6 +93,10 @@ config HOSTAP_CRYPTO_ENTERPRISE select MBEDTLS_RSA_C select MBEDTLS_SSL_SERVER_NAME_INDICATION select MBEDTLS_SSL_CLI_ALLOW_WEAK_CERTIFICATE_VERIFICATION_WITHOUT_HOSTNAME + select MBEDTLS_ECP_DP_SECP384R1_ENABLED + select MBEDTLS_ECP_DP_SECP521R1_ENABLED + select MBEDTLS_ECP_DP_CURVE25519_ENABLED + select MBEDTLS_ECP_DP_CURVE448_ENABLED default y endif From aa97140e806fcbab11b4a0a853bbd84611f956a1 Mon Sep 17 00:00:00 2001 From: Ravi Dondaputi Date: Tue, 16 Sep 2025 13:25:20 +0530 Subject: [PATCH 2/2] manifest: sdk-zephyr: Enable runtime certificates Enable runtime certificates support for all nRF builds. Signed-off-by: Ravi Dondaputi --- west.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/west.yml b/west.yml index 46135f64af8f..a639de3191e5 100644 --- a/west.yml +++ b/west.yml @@ -65,7 +65,7 @@ manifest: # https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/zephyr/guides/modules.html - name: zephyr repo-path: sdk-zephyr - revision: 05b8b21aa9779fb1cb19ad59e7443ebec460aeee + revision: pull/3358/head import: # In addition to the zephyr repository itself, NCS also # imports the contents of zephyr/west.yml at the above