[PATCH 0/5] Fix missing TLS v1.3 support with OpenSSL

Petr Štetiar ynezz at true.cz
Thu Jun 15 07:32:07 PDT 2023


Hi,

current default official images on all devices are using mbedTLS 2.y which
doesn't support TLS v1.3 (#12874), so lets fix it by using OpenSSL on devices
which should have enough storage space to accomodate additional ~1.5MB
(rough estimate didn't measured it).

This is just my first quick attempt to implement one of the possible
solutions, since I think, that using mbedTLS 3.y is not an option for backport
into 23.05.

Cheers,

Petr

Petr Štetiar (5):
  build: add GRAND_FLASH feature
  build: add WIRELESS_SUPPORT feature
  treewide: unify wireless feature handling
  target: grand flash devices should use OpenSSL
  treewide: mark grand_flash targets

 config/Config-build.in                        | 20 ++++++++
 include/target.mk                             | 28 ++++++++++-
 scripts/target-metadata.pl                    |  2 +
 target/Config.in                              |  9 ++++
 target/linux/airoha/Makefile                  |  2 +-
 target/linux/apm821xx/Makefile                |  2 +-
 target/linux/apm821xx/image/sata.mk           |  2 +-
 target/linux/apm821xx/nand/target.mk          |  2 +-
 .../apm821xx/sata/profiles/00-default.mk      |  2 +-
 .../archs38/generic/profiles/00-default.mk    |  2 +-
 target/linux/archs38/generic/target.mk        |  2 +-
 target/linux/armsr/Makefile                   |  2 +-
 target/linux/ath25/Makefile                   |  4 +-
 target/linux/ath79/Makefile                   |  2 +-
 target/linux/ath79/generic/target.mk          |  2 -
 target/linux/ath79/image/generic-ubnt.mk      |  2 +-
 target/linux/ath79/image/generic.mk           | 10 ++--
 target/linux/ath79/mikrotik/target.mk         |  2 +-
 target/linux/ath79/nand/target.mk             |  2 -
 target/linux/ath79/tiny/target.mk             |  2 -
 target/linux/bcm27xx/Makefile                 |  3 +-
 target/linux/bcm27xx/image/Makefile           |  8 +--
 .../generic/profiles/101-Broadcom-wl.mk       |  2 +-
 .../generic/profiles/105-Broadcom-none.mk     |  2 +-
 .../generic/profiles/201-Broadcom-b44-wl.mk   |  2 +-
 .../generic/profiles/205-Broadcom-b44-none.mk |  2 +-
 .../generic/profiles/211-Broadcom-tg3-wl.mk   |  2 +-
 .../generic/profiles/215-Broadcom-tg3-none.mk |  2 +-
 .../generic/profiles/221-Broadcom-bgmac-wl.mk |  2 +-
 .../profiles/225-Broadcom-bgmac-none.mk       |  2 +-
 .../bcm47xx/generic/profiles/PS-1208MFG.mk    |  2 +-
 target/linux/bcm47xx/generic/target.mk        |  4 +-
 .../legacy/profiles/101-Broadcom-wl.mk        |  2 +-
 target/linux/bcm47xx/legacy/target.mk         |  4 +-
 .../mips74k/profiles/102-Broadcom-wl.mk       |  2 +-
 .../mips74k/profiles/103-Broadcom-none.mk     |  2 +-
 target/linux/bcm47xx/mips74k/target.mk        |  3 +-
 target/linux/bcm4908/Makefile                 |  2 +-
 target/linux/bcm53xx/generic/target.mk        |  1 +
 target/linux/bcm53xx/image/Makefile           |  9 ++--
 target/linux/bcm63xx/Makefile                 |  2 +-
 target/linux/bcm63xx/image/Makefile           | 10 ++--
 target/linux/bcm63xx/profiles/default.mk      |  2 +-
 target/linux/bmips/Makefile                   |  2 +-
 target/linux/bmips/image/Makefile             |  4 +-
 target/linux/bmips/image/bcm63268.mk          |  8 +--
 target/linux/bmips/image/bcm6362.mk           |  2 +-
 target/linux/gemini/Makefile                  |  2 +-
 target/linux/ipq40xx/Makefile                 |  4 +-
 target/linux/ipq806x/Makefile                 |  4 +-
 target/linux/ipq807x/Makefile                 |  4 +-
 target/linux/kirkwood/Makefile                |  2 +-
 target/linux/kirkwood/image/Makefile          | 49 ++++++++++++-------
 target/linux/lantiq/Makefile                  |  2 +-
 target/linux/lantiq/image/amazonse.mk         |  6 ++-
 target/linux/lantiq/image/ar9.mk              | 18 +++----
 target/linux/lantiq/image/danube.mk           | 29 +++++------
 target/linux/lantiq/image/falcon.mk           | 18 +++++--
 target/linux/lantiq/image/tp-link.mk          |  8 +--
 target/linux/lantiq/image/vr9.mk              | 39 ++++++++-------
 target/linux/lantiq/image/xway_legacy.mk      | 10 ++--
 target/linux/layerscape/Makefile              |  2 +-
 target/linux/malta/Makefile                   |  4 +-
 target/linux/mediatek/Makefile                |  3 +-
 target/linux/mediatek/filogic/target.mk       |  2 +-
 target/linux/mediatek/mt7622/target.mk        |  2 +-
 target/linux/mpc85xx/Makefile                 |  4 +-
 target/linux/mvebu/Makefile                   |  2 +-
 target/linux/mvebu/image/cortexa53.mk         | 10 +++-
 target/linux/mvebu/image/cortexa72.mk         | 12 +++--
 target/linux/mvebu/image/cortexa9.mk          | 28 +++++++----
 target/linux/omap/Makefile                    |  2 +-
 target/linux/omap/profiles/00-default.mk      |  3 +-
 target/linux/oxnas/Makefile                   |  2 +-
 target/linux/oxnas/image/ox810se.mk           |  1 +
 target/linux/oxnas/image/ox820.mk             | 10 ++--
 target/linux/qoriq/Makefile                   |  3 +-
 target/linux/ramips/Makefile                  |  2 +-
 target/linux/ramips/image/mt7620.mk           |  2 +-
 target/linux/ramips/image/mt7621.mk           | 44 ++++++++---------
 target/linux/ramips/mt7620/target.mk          |  2 +-
 target/linux/ramips/mt7621/target.mk          |  2 +-
 target/linux/ramips/mt76x8/target.mk          |  2 +-
 target/linux/ramips/rt288x/target.mk          |  2 +-
 target/linux/ramips/rt305x/target.mk          |  2 +-
 target/linux/ramips/rt3883/target.mk          |  2 +-
 target/linux/rockchip/Makefile                |  3 +-
 target/linux/sifiveu/Makefile                 |  2 +-
 target/linux/sunxi/Makefile                   |  2 +-
 target/linux/sunxi/image/cortexa53.mk         |  8 ++-
 target/linux/sunxi/image/cortexa7.mk          | 45 +++++++++--------
 target/linux/sunxi/image/cortexa8.mk          |  7 +--
 target/linux/sunxi/profiles/00-default.mk     |  3 +-
 target/linux/tegra/Makefile                   |  3 +-
 target/linux/tegra/image/Makefile             |  2 +-
 target/linux/uml/Makefile                     |  4 +-
 target/linux/x86/Makefile                     |  2 +-
 target/linux/zynq/Makefile                    |  2 +-
 98 files changed, 365 insertions(+), 252 deletions(-)




More information about the openwrt-devel mailing list