[Buildroot] [PATCH] package/openvpn: add option to use mbed TLS instead of OpenSSL

Ed Spiridonov edo.rus at gmail.com
Fri May 15 20:39:09 UTC 2020


On Fri, May 15, 2020 at 11:10 PM Thomas Petazzoni
<thomas.petazzoni at bootlin.com> wrote:
> Could you change this to:
>
>         select BR2_PACKAGE_OPENSSL if !BR2_PACKAGE_MBEDTLS

Ok. But I would rather use mbed TLS as the default option:
        select BR2_PACKAGE_MBEDTLS if !BR2_PACKAGE_OPENSSL

OpenVPN + mbed TLS combination is well tested (Android/iOS builds use mbed TLS).

> This way, we use mbedtls if available, otherwise we use OpenSSL.

BTW, there is "--disable-crypto" build option, but I'm unsure if anyone use it.

P. S. What about other options? OpenWRT has lot of them
https://github.com/openwrt/openwrt/blob/master/package/network/services/openvpn/Config-openssl.in
This helps make the binary more compact.



More information about the buildroot mailing list