[nrf toup][nrfconnect] Add kconfig to control X509 usage

Added the CHIP_CRYPTO_USE_X509 kconfig option to enable or disable
the x509 certificate processing for nrfconnect devices.

Signed-off-by: Arkadiusz Balys <arkadiusz.balys@nordicsemi.no>

Author: ArekBalysNordic

config/nrfconnect/chip-module/CMakeLists.txt

@@ -161,6 +161,7 @@ matter_add_gn_arg_bool  ("chip_enable_read_client"                CONFIG_CHIP_EN
 matter_add_gn_arg_bool  ("chip_mdns_minimal"                      CONFIG_WIFI_NRF70)
 matter_add_gn_arg_bool  ("chip_mdns_platform"                     CONFIG_OPENTHREAD)
 matter_add_gn_arg_bool  ("enable_im_pretty_print"                 CONFIG_CHIP_IM_PRETTY_PRINT)
+matter_add_gn_arg_bool  ("chip_crypto_use_x509"                   CONFIG_CHIP_CRYPTO_USE_X509)
 
 matter_add_gn_arg_bool  ("chip_system_config_use_sockets"                   NOT CONFIG_CHIP_USE_OPENTHREAD_ENDPOINT)
 matter_add_gn_arg_bool  ("chip_system_config_use_openthread_inet_endpoints" CONFIG_CHIP_USE_OPENTHREAD_ENDPOINT)

config/nrfconnect/chip-module/Kconfig

@@ -493,4 +493,11 @@ config CHIP_IM_PRETTY_PRINT
 	  Request). This option helps in debugging and development of message exchanges within the Matter
 	  protocol.
 
+config CHIP_CRYPTO_USE_X509
+	bool "X.509 certificate support"
+	default n if CHIP_CRYPTO_PSA
+	default y if MBEDTLS_X509_LIBRARY # We still need it to be enabled if we use mbedTLS as the crypto backend
+	help
+	  Enables X.509 certificate support for Matter.
+
 endif # CHIP

src/test_driver/nrfconnect/prj.conf

@@ -94,3 +94,6 @@ CONFIG_CHIP_FACTORY_RESET_ERASE_SETTINGS=n
 # Use default ICD poll intervals to keep compatibility with tests
 CONFIG_CHIP_ICD_SLOW_POLL_INTERVAL=5000
 CONFIG_CHIP_ICD_FAST_POLLING_INTERVAL=200
+
+# Enable X.509 certificate support
+CONFIG_CHIP_CRYPTO_USE_X509=y