ca-certificate-mini with signeture stripped?

Rui Salvaterra rsalvaterra at gmail.com
Tue Jul 22 03:29:59 PDT 2025


Hi, Seo,


On Tue, 22 Jul 2025 at 05:49, Seo Suchan <tjtncks at gmail.com> wrote:
>
> both mbedtls and openssl doesn't actually check self-signness of turst
> anchor, so one can remove signeture from root certificates and reduce
> file size while keep compatablity. in current version this would save
> about 60kB (223kb current, 158kb without signture) but not sure if this
> is something worth making new package for

It does make sense, at least for TINY targets. Feel free to send a
patch or a pull request on GitHub.


Cheers,

Rui



More information about the openwrt-devel mailing list