prpl/prplos
2
0
Fork 0
mirror of https://gitlab.com/prpl-foundation/prplos/prplos.git synced 2026-01-08 13:43:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

profiles: prpl: make OpenSSL default and only TLS provider

Browse Source 
Currently we’ve two TLS providers included in the images, mbedTLS and
OpenSSL.  This is unfortunate at least from the maintenance, security
and support perspective.  The preference is to use OpenSSL as the only
TLS provider, so lets adjust the configuration accordingly.

Fixes: PCF-1006
Signed-off-by: Petr Štetiar <ynezz@true.cz>
This commit is contained in:
Petr Štetiar
2023-11-15 11:13:43 +00:00
parent 0f81cab89a
commit e206607d02
4 changed files with 43 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
.gitlab/tests/cram/prpl-haze/011-tls.t Normal file
View File

@@ -0,0 +1,13 @@
Create R alias:
$ alias R="${CRAM_REMOTE_COMMAND:-}"
Check that there is just single TLS library OpenSSL:
$ R "opkg list-installed" | grep -E '(openssl|mbedtls|wolfssl)' | sort | awk -F ' - ' '{print $1}'
hostapd-openssl
libopenssl-conf
libopenssl.* (re)
libustream-openssl.* (re)
openssl-util
wpa-supplicant-openssl

13
.gitlab/tests/cram/turris-omnia/011-tls.t Normal file
View File

@@ -0,0 +1,13 @@
Create R alias:
$ alias R="${CRAM_REMOTE_COMMAND:-}"
Check that there is just single TLS library OpenSSL:
$ R "opkg list-installed" | grep -E '(openssl|mbedtls|wolfssl)' | sort | awk -F ' - ' '{print $1}'
hostapd-openssl
libopenssl-conf
libopenssl.* (re)
libustream-openssl.* (re)
openssl-util
wpa-supplicant-openssl

11
.gitlab/tests/cram/urx851-b0-dk/011-tls.t Normal file
View File

@@ -0,0 +1,11 @@
Create R alias:
$ alias R="${CRAM_REMOTE_COMMAND:-}"
Check that there is just single TLS library OpenSSL:
$ R "opkg list-installed" | grep -E '(openssl|mbedtls|wolfssl)' | sort | awk -F ' - ' '{print $1}'
libopenssl-conf
libopenssl.* (re)
libustream-openssl.* (re)
openssl-util

6
profiles/prpl.yml
View File

@@ -233,3 +233,9 @@ diffconfig: |
CONFIG_VERSION_SUPPORT_URL="https://jira.prplfoundation.org"
# CONFIG_VERSION_FILENAMES is not set
# CONFIG_VERSION_CODE_FILENAMES is not set
# OpenSSL is the default and only TLS provider
CONFIG_LIBCURL_OPENSSL=y
# CONFIG_LIBCURL_MBEDTLS is not set
# CONFIG_PACKAGE_libwolfssl is not set
# CONFIG_PACKAGE_libustream-wolfssl is not set
CONFIG_PACKAGE_libustream-openssl=y