Rename methods to avoid axtls references.

Author: earlephilhower

libraries/ESP8266WiFi/examples/BearSSL_Validation/BearSSL_Validation.ino

@@ -193,11 +193,12 @@ BearSSL does verify the notValidBefore/After fields.
   fetchURL(&client, host, port, path);
 }
 
-void fetchAxTLS() {
+void fetchFaster() {
   Serial.printf(R"EOF(
 The ciphers used to set up the SSL connection can be configured to
-be the same as axTLS. They are faster, but less secure, so if you care
-about security you won't want to do this.
+only support faster but less secure ciphers.  If you care about security
+you won't want to do this.  If you need to maximize battery life, these
+may make sense
 )EOF");
   BearSSL::WiFiClientSecure client;
   client.setInsecure();
@@ -206,10 +207,10 @@ about security you won't want to do this.
   uint32_t delta = millis() - now;
   now = millis();
   client.setInsecure();
-  client.setAxTLSCiphers();
+  client.setCiphersLessSecure();
   fetchURL(&client, host, port, path);
   uint32_t delta2 = millis() - now;
-  Serial.printf("Using more secure: %dms\nUsiing axTLS ciphers: %dms\n", delta, delta2);
+  Serial.printf("Using more secure: %dms\nUsing less secure ciphers: %dms\n", delta, delta2);
 }
 
 void setup() {
@@ -239,7 +240,7 @@ void setup() {
   fetchSelfSigned();
   fetchKnownKey();
   fetchCertAuthority();
-  fetchAxTLS();
+  fetchFaster();
 }
 
 

libraries/ESP8266WiFi/src/WiFiClientSecureBearSSL.cpp

@@ -687,8 +687,8 @@ extern "C" {
     BR_TLS_RSA_WITH_3DES_EDE_CBC_SHA
   };
 
-  // For apps which want to use less secure but faster axTLS ciphers, only
-  static const uint16_t axtls_suites_P[] PROGMEM = {
+  // For apps which want to use less secure but faster ciphers, only
+  static const uint16_t faster_suites_P[] PROGMEM = {
     BR_TLS_RSA_WITH_AES_256_CBC_SHA256,
     BR_TLS_RSA_WITH_AES_128_CBC_SHA256,
     BR_TLS_RSA_WITH_AES_256_CBC_SHA,
@@ -735,10 +735,10 @@ extern "C" {
 
 }
 
-// Set the AXTLS ciphers as the only ones allowed
-void WiFiClientSecure::setAxTLSCiphers()
+// Set the faster ciphers as the only ones allowed
+void WiFiClientSecure::setCiphersLessSecure()
 {
-  setCiphers(axtls_suites_P, sizeof(axtls_suites_P)/sizeof(axtls_suites_P[0]));
+  setCiphers(faster_suites_P, sizeof(faster_suites_P)/sizeof(faster_suites_P[0]));
 }
 
 // Installs the appropriate X509 cert validation method for a client connection

libraries/ESP8266WiFi/src/WiFiClientSecureBearSSL.h

@@ -107,7 +107,7 @@ class WiFiClientSecure : public WiFiClient {
     // Select specific ciphers (i.e. optimize for speed over security)
     // These may be in PROGMEM or RAM, either will run properly
     void setCiphers(const uint16_t *cipherAry, int cipherCount) { _cipher_list = cipherAry; _cipher_cnt = cipherCount; }
-    void setAxTLSCiphers(); // Only use the limited set of axTLS ciphers
+    void setCiphersLessSecure(); // Only use the limited set of RSA ciphers without EC
 
     // Check for Maximum Fragment Length support for given len
     static bool probeMaxFragmentLength(IPAddress ip, uint16_t port, uint16_t len);