michaelh/zephyr
1
0
Fork 0
Code Releases Activity

Bluetooth: smp: Warn on enabling several Bluetooth options

Browse source 
Add warning about enabling the options below so that users are
aware that this is a security risk.

- CONFIG_BT_DEBUG_SMP
- CONFIG_BT_DEBUG_KEYS
- CONFIG_BT_OOB_DATA_FIXED
- CONFIG_BT_USE_DEBUG_KEYS
- CONFIG_BT_STORE_DEBUG_KEYS

Signed-off-by: Carles Cufi <carles.cufi@nordicsemi.no>
This commit is contained in:
Carles Cufi 2020-06-15 14:01:46 +02:00 • committed by Johan Hedberg
commit 88f25df9ac
3 changed files with 48 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

21
subsys/bluetooth/host/CMakeLists.txt
View file

@ -56,3 +56,24 @@ if(CONFIG_BT_HCI_HOST)
endif()
endif()
endif()
if(CONFIG_BT_DEBUG_SMP OR CONFIG_BT_DEBUG_KEYS)
message(WARNING "One or both these options are enabled:
CONFIG_BT_DEBUG_SMP CONFIG_BT_DEBUG_KEYS.
Private security keys such as the LTK will be printed out, do not use in
production."
)
endif()
if(CONFIG_BT_OOB_DATA_FIXED)
message(WARNING "CONFIG_BT_OOB_DATA_FIXED is enabled.
A hardcoded OOB data set will be stored in the image, do not use in
production."
)
endif()
if(CONFIG_BT_USE_DEBUG_KEYS OR CONFIG_BT_STORE_DEBUG_KEYS)
message(WARNING "One or both these options are enabled:
CONFIG_BT_USE_DEBUG_KEYS CONFIG_BT_STORE_DEBUG_KEYS.
A predefined, publicly available keypair intended for testing will be used.
Do not use in production."
)
endif()