ca-certificate-mini with signeture stripped?
Rui Salvaterra
rsalvaterra at gmail.com
Tue Jul 22 03:29:59 PDT 2025
Hi, Seo,
On Tue, 22 Jul 2025 at 05:49, Seo Suchan <tjtncks at gmail.com> wrote:
>
> both mbedtls and openssl doesn't actually check self-signness of turst
> anchor, so one can remove signeture from root certificates and reduce
> file size while keep compatablity. in current version this would save
> about 60kB (223kb current, 158kb without signture) but not sure if this
> is something worth making new package for
It does make sense, at least for TINY targets. Feel free to send a
patch or a pull request on GitHub.
Cheers,
Rui
More information about the openwrt-devel
mailing list