[Buildroot] [PATCH] package/openvpn: add option to use mbed TLS instead of OpenSSL
Thomas Petazzoni
thomas.petazzoni at bootlin.com
Fri May 15 20:47:42 UTC 2020
Hello Ed,
On Fri, 15 May 2020 23:39:09 +0300
Ed Spiridonov <edo.rus at gmail.com> wrote:
> On Fri, May 15, 2020 at 11:10 PM Thomas Petazzoni
> <thomas.petazzoni at bootlin.com> wrote:
> > Could you change this to:
> >
> > select BR2_PACKAGE_OPENSSL if !BR2_PACKAGE_MBEDTLS
>
> Ok. But I would rather use mbed TLS as the default option:
> select BR2_PACKAGE_MBEDTLS if !BR2_PACKAGE_OPENSSL
>
> OpenVPN + mbed TLS combination is well tested (Android/iOS builds use mbed TLS).
The idea of using select BR2_PACKAGE_OPENSSL if !BR2_PACKAGE_MBEDTLS
was to keep the current behavior, i.e be backward compatible.
> > This way, we use mbedtls if available, otherwise we use OpenSSL.
>
> BTW, there is "--disable-crypto" build option, but I'm unsure if anyone use it.
>
> P. S. What about other options? OpenWRT has lot of them
> https://github.com/openwrt/openwrt/blob/master/package/network/services/openvpn/Config-openssl.in
> This helps make the binary more compact.
Feel free to add support for more options, patches welcome. Thanks!
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
More information about the buildroot
mailing list