caf: ble_state: Optional security request

Change makes security level 2 request optional. The security
request is no longer enabled by default for peripheral.

Jira: NCSDK-14084

Signed-off-by: Marek Pieta <[email protected]>

Author: MarekPieta

subsys/caf/modules/Kconfig.ble_state

@@ -17,6 +17,11 @@ menuconfig CAF_BLE_STATE
 
 if CAF_BLE_STATE
 
+config CAF_BLE_STATE_SECURITY_REQ
+	bool "Request connection encryption (security level 2)"
+	help
+	  Automatically request connection encryption right after the connection is established.
+
 config CAF_BLE_STATE_PM
 	bool "Enable bluetooth LE power manager integration"
 	depends on CAF_BLE_STATE

subsys/caf/modules/ble_state.c

@@ -205,6 +205,9 @@ static void connected(struct bt_conn *conn, uint8_t error)
 			LOG_INF("Already bonded to %s", log_strdup(addr_str));
 			goto disconnect;
 		}
+	}
+
+	if (IS_ENABLED(CONFIG_CAF_BLE_STATE_SECURITY_REQ)) {
 		/* Security must be enabled after peer event is sent.
 		 * This is to make sure notification events are propagated
 		 * in the right order.
@@ -279,7 +282,7 @@ static void security_changed(struct bt_conn *conn, bt_security_t level,
 	} else {
 		LOG_WRN("Security with %s failed, level %u err %d",
 			log_strdup(addr), level, bt_err);
-		if (IS_ENABLED(CONFIG_BT_PERIPHERAL)) {
+		if (IS_ENABLED(CONFIG_CAF_BLE_STATE_SECURITY_REQ)) {
 			disconnect_peer(conn);
 		}