From af6038aac077bf52d8580e0d833f7bf6bea632a0 Mon Sep 17 00:00:00 2001 From: Tomi Fontanilles Date: Thu, 12 Mar 2026 13:28:21 +0200 Subject: [PATCH 1/3] [nrf toup][nrfconnect] rename OPENTHREAD_SECURITY Kconfig choice To OPENTHREAD_SECURITY_CONFIG just as was done in Zephyr. Signed-off-by: Tomi Fontanilles --- config/nrfconnect/chip-module/Kconfig.defaults | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/config/nrfconnect/chip-module/Kconfig.defaults b/config/nrfconnect/chip-module/Kconfig.defaults index 9875046bdf..1e983285a5 100644 --- a/config/nrfconnect/chip-module/Kconfig.defaults +++ b/config/nrfconnect/chip-module/Kconfig.defaults @@ -363,10 +363,10 @@ endif # CHIP_WIFI # Crypto configuration # ============================================================================== -choice OPENTHREAD_SECURITY +choice OPENTHREAD_SECURITY_CONFIG default OPENTHREAD_NRF_SECURITY_PSA_CHOICE if CHIP_CRYPTO_PSA default OPENTHREAD_NRF_SECURITY_CHOICE - + endchoice choice RNG_GENERATOR_CHOICE @@ -553,7 +553,7 @@ if CHIP_LIB_SHELL choice POSIX_AEP_CHOICE default POSIX_AEP_CHOICE_NONE -endchoice +endchoice endif # CHIP_LIB_SHELL From 3d0ee453b11834c16c971efd0d71405b1d99f719 Mon Sep 17 00:00:00 2001 From: Tomi Fontanilles Date: Thu, 12 Mar 2026 13:29:19 +0200 Subject: [PATCH 2/3] [nrf toup][nrfconnect] remove CONFIG_NRF_SECURITY_ADVANCED It has been unused for some time and is about to be removed in NCS. Signed-off-by: Tomi Fontanilles --- config/nrfconnect/chip-module/Kconfig.defaults | 3 --- 1 file changed, 3 deletions(-) diff --git a/config/nrfconnect/chip-module/Kconfig.defaults b/config/nrfconnect/chip-module/Kconfig.defaults index 1e983285a5..03d28e2f5e 100644 --- a/config/nrfconnect/chip-module/Kconfig.defaults +++ b/config/nrfconnect/chip-module/Kconfig.defaults @@ -423,9 +423,6 @@ if !CHIP_CRYPTO_PSA config OBERON_BACKEND default y -config NRF_SECURITY_ADVANCED - default y - config MBEDTLS_AES_C default y From b84dbee05050ce2f708d10f15959fb0195858015 Mon Sep 17 00:00:00 2001 From: Tomi Fontanilles Date: Mon, 16 Mar 2026 11:39:44 +0200 Subject: [PATCH 3/3] [nrf toup][nrfconnect] add missing Mbed TLS Kconfig option Add missing dependency CONFIG_MBEDTLS_X509_CRT_PARSE_C to test_driver configuration. Signed-off-by: Tomi Fontanilles --- src/test_driver/nrfconnect/prj.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/src/test_driver/nrfconnect/prj.conf b/src/test_driver/nrfconnect/prj.conf index 78d22b9516..21fad7c294 100644 --- a/src/test_driver/nrfconnect/prj.conf +++ b/src/test_driver/nrfconnect/prj.conf @@ -45,6 +45,7 @@ CONFIG_MBEDTLS_USER_CONFIG_ENABLE=y CONFIG_MBEDTLS_USER_CONFIG_FILE="app_mbedtls_config.h" CONFIG_MBEDTLS_ENTROPY_POLL_ZEPHYR=y CONFIG_MBEDTLS_ENTROPY_C=y +CONFIG_MBEDTLS_X509_CRT_PARSE_C=y CONFIG_MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED=y CONFIG_MBEDTLS_PSA_CRYPTO_C=y CONFIG_MBEDTLS_MEMORY_DEBUG=y