[Buildroot] [PATCH 1/3] package/mbedtls: add BR2_PACKAGE_MBEDTLS_X509_UNSUPPORTED_CRITICAL_EXTENSION

Nicola Di Lieto nicola.dilieto at gmail.com
Fri Apr 24 13:11:08 UTC 2020


On Fri, Apr 24, 2020 at 01:48:13PM +0200, Yann E. MORIN wrote:
>Until then, my opinion is that we should just stop building uacme with
>embedtls.

Please do not confuse the main binary uacme (which is perfecty OK and 
*does not* require the new TLS extension) with ualpn, a separate and 
optional binary recently added to the uacme distribution to answer 
tls-alpn-01 challenges (which requires the new TLS extension).

Building ualpn should actually be disabled by default in buildroot 
(check BR2_PACKAGE_UACME_UALPN in package/uacme/Config.in)

I propose making BR2_PACKAGE_UACME_UALPN depend on !BR2_PACKAGE_MBEDTLS.  
Would that be acceptable?




More information about the buildroot mailing list