OpenWrt 26.XX (next major release)

[Michael Richardson]

Hauke Mehrtens <hauke at hauke-m.de> wrote:
    > We need a SSL library, currently I am aware of the following options:
    > * Stay on mbedtls 3.6
    > * EoL April 2027
    > * Switch to mbedtls 4.1
    > * EoL April 2027

sad: I've dealt with many issues here.  Very very frustrating.

    > * Switch to wolfssl
    > * Needs more space (RAM + flash)

While it has good TLS, the PKIX parts of wolfssl are pretty bare.
Or when the core functionality does exist, the openssl wrapper layer is not
useable.

    > * Only major version updates from vendor
    > * Switch to OpenSSL
    > * Even bigger than wolfssl
    > * Has LTS versions
    > * Other library?

a. I suspect that if we have been able to live on what mbedtls provides, then
   it may be possible to turn off many options in libssl, libcrypto
   compilation to reduce size.

b. since we don't use /usr/bin/openssl (mbedtls does not offer that), that
   leaving that part out will help.

There are growing numbers of RUST based crypto libraries, but really that
reveals the actually core thing is not exactly bytes, but rather, whether the
application can meaningfully compile or link.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 487 bytes
Desc: not available
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20261112/b1569ffe/attachment.sig>