From mboxrd@z Thu Jan 1 00:00:00 1970 From: Thomas Petazzoni Date: Fri, 15 May 2020 22:47:42 +0200 Subject: [Buildroot] [PATCH] package/openvpn: add option to use mbed TLS instead of OpenSSL In-Reply-To: References: <20200511223108.4184-1-edo.rus@gmail.com> <20200515221042.011b8d33@windsurf.home> Message-ID: <20200515224742.251bed10@windsurf.home> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net Hello Ed, On Fri, 15 May 2020 23:39:09 +0300 Ed Spiridonov wrote: > On Fri, May 15, 2020 at 11:10 PM Thomas Petazzoni > wrote: > > Could you change this to: > > > > select BR2_PACKAGE_OPENSSL if !BR2_PACKAGE_MBEDTLS > > Ok. But I would rather use mbed TLS as the default option: > select BR2_PACKAGE_MBEDTLS if !BR2_PACKAGE_OPENSSL > > OpenVPN + mbed TLS combination is well tested (Android/iOS builds use mbed TLS). The idea of using select BR2_PACKAGE_OPENSSL if !BR2_PACKAGE_MBEDTLS was to keep the current behavior, i.e be backward compatible. > > This way, we use mbedtls if available, otherwise we use OpenSSL. > > BTW, there is "--disable-crypto" build option, but I'm unsure if anyone use it. > > P.?S. What about other options? OpenWRT has lot of them > https://github.com/openwrt/openwrt/blob/master/package/network/services/openvpn/Config-openssl.in > This helps make the binary more compact. Feel free to add support for more options, patches welcome. Thanks! Thomas -- Thomas Petazzoni, CTO, Bootlin Embedded Linux and Kernel engineering https://bootlin.com