[nrf toup][nrfconnect] Add kconfig to control X509 usage

Added the CHIP_CRYPTO_USE_X509 kconfig option to enable or disable
the x509 certificate processing for nrfconnect devices.

Signed-off-by: Arkadiusz Balys <arkadiusz.balys@nordicsemi.no>

Author: ArekBalysNordic

config/nrfconnect/chip-module/CMakeLists.txt

@@ -161,6 +161,7 @@ matter_add_gn_arg_bool  ("chip_enable_read_client"                CONFIG_CHIP_EN
 matter_add_gn_arg_bool  ("chip_mdns_minimal"                      CONFIG_WIFI_NRF70)
 matter_add_gn_arg_bool  ("chip_mdns_platform"                     CONFIG_OPENTHREAD)
 matter_add_gn_arg_bool  ("enable_im_pretty_print"                 CONFIG_CHIP_IM_PRETTY_PRINT)
+matter_add_gn_arg_bool  ("chip_crypto_use_x509"                   CONFIG_CHIP_CRYPTO_USE_X509)
 
 matter_add_gn_arg_bool  ("chip_system_config_use_sockets"                   NOT CONFIG_CHIP_USE_OPENTHREAD_ENDPOINT)
 matter_add_gn_arg_bool  ("chip_system_config_use_openthread_inet_endpoints" CONFIG_CHIP_USE_OPENTHREAD_ENDPOINT)

config/nrfconnect/chip-module/Kconfig.features

@@ -269,4 +269,12 @@ config CHIP_LAST_FABRIC_REMOVED_ACTION_DELAY
 	  After removing the last fabric the device will wait for the defined time and then perform
 	  an action chosen by the CHIP_LAST_FABRIC_REMOVED_ACTION option. This schedule will allow for
 	  avoiding race conditions before the device removes non-volatile data.
+
+config CHIP_CRYPTO_USE_X509
+	bool "MbedTLS X.509 certificate support"
+	default n if CHIP_CRYPTO_PSA
+	default y if MBEDTLS_X509_LIBRARY # We still need it to be enabled if we use mbedTLS as the crypto backend
+	help
+	  Enables X.509 certificate support for Matter.
+
 endif # CHIP

src/test_driver/nrfconnect/CMakeLists.txt

@@ -41,6 +41,7 @@ set(CHIP_CFLAGS
     -DCHIP_SYSTEM_CONFIG_USE_ZEPHYR_SOCKET_EXTENSIONS=0
     -DCHIP_SYSTEM_CONFIG_USE_ZEPHYR_NET_IF=0
     -DCHIP_SYSTEM_CONFIG_USE_BSD_IFADDRS=1
+    -DCHIP_CRYPTO_USE_X509=1
     -I${CMAKE_CURRENT_SOURCE_DIR}/main/include
 )