modules: mbedtls: remove RSA based ciphersuites

Ciphersuites using RSA encryption were removed from Mbed TLS 4.0. As a
consequence this commit removes
MBEDTLS_CIPHERSUITE_TLS_RSA_WITH_AES_256_CBC_SHA256 and replaces it with
MBEDTLS_CIPHERSUITE_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 in tests/samples
code.

Signed-off-by: Valerio Setti <vsetti@baylibre.com>

Author: valeriosetti

modules/mbedtls/Kconfig.ciphersuites

@@ -59,22 +59,6 @@ config MBEDTLS_CIPHERSUITE_TLS_PSK_WITH_AES_128_GCM_SHA256
 	select PSA_WANT_KEY_TYPE_AES
 	select PSA_WANT_KEY_TYPE_DERIVE
 
-config MBEDTLS_CIPHERSUITE_TLS_RSA_WITH_AES_256_CBC_SHA256
-	bool "Ciphersuite TLS_RSA_WITH_AES_256_CBC_SHA256"
-	select MBEDTLS_SSL_PROTO_TLS1_2
-	select MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED
-	select PSA_WANT_ALG_TLS12_PSK_TO_MS
-	select PSA_WANT_ALG_TLS12_PRF
-	select PSA_WANT_ALG_CBC_NO_PADDING
-	select PSA_WANT_ALG_SHA_256
-	select PSA_WANT_KEY_TYPE_AES
-	select PSA_WANT_ALG_RSA_PKCS1V15_CRYPT
-	select PSA_WANT_ALG_RSA_PKCS1V15_SIGN
-	select PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT
-	select PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_EXPORT
-	select PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_GENERATE
-	select PSA_WANT_KEY_TYPE_DERIVE
-
 config MBEDTLS_CIPHERSUITE_ECJPAKE_WITH_AES_128_CCM_8
 	bool "Ciphersuite ECJPAKE_WITH_AES_128_CCM_8"
 	select MBEDTLS_SSL_PROTO_TLS1_2

samples/subsys/mgmt/hawkbit/overlay-tls.conf

@@ -9,4 +9,4 @@ CONFIG_MBEDTLS_SSL_MAX_CONTENT_LEN=16384
 
 CONFIG_NET_SOCKETS_SOCKOPT_TLS=y
 CONFIG_HAWKBIT_USE_TLS=y
-CONFIG_MBEDTLS_CIPHERSUITE_TLS_RSA_WITH_AES_256_CBC_SHA256=y
+CONFIG_MBEDTLS_CIPHERSUITE_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256=y

tests/net/socket/tls/prj.conf

@@ -52,4 +52,4 @@ CONFIG_MBEDTLS_HEAP_SIZE=30000
 CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID=y
 CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT=32
 CONFIG_MBEDTLS_CIPHERSUITE_TLS_PSK_WITH_AES_256_CBC_SHA384=y
-CONFIG_MBEDTLS_CIPHERSUITE_TLS_RSA_WITH_AES_256_CBC_SHA256=y
+CONFIG_MBEDTLS_CIPHERSUITE_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256=y