mirror of
https://source.denx.de/u-boot/u-boot.git
synced 2026-06-11 06:06:52 +03:00
12cc6531a1
Introduce Kconfig symbols WGET_BUILTIN_CACERT and WGET_BUILTIN_CACERT_PATH to provide root certificates at build time. Usage example: wget -O cacert.crt https://cacerts.digicert.com/DigiCertTLSECCP384RootG5.crt make qemu_arm64_lwip_defconfig echo CONFIG_WGET_BUILTIN_CACERT=y >>.config echo CONFIG_WGET_BUILTIN_CACERT_PATH=cacert.crt >>.config make olddefconfig make -j$(nproc) CROSS_COMPILE="ccache aarch64-linux-gnu-" qemu-system-aarch64 -M virt -nographic -cpu max \ -object rng-random,id=rng0,filename=/dev/urandom \ -device virtio-rng-pci,rng=rng0 -bios u-boot.bin => dhcp # HTTPS transfer using the builtin CA certificates => wget https://digicert-tls-ecc-p384-root-g5.chain-demos.digicert.com/ 1867 bytes transferred in 1 ms (1.8 MiB/s) Bytes transferred = 1867 (74b hex) Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org> Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
15 lines
472 B
Makefile
15 lines
472 B
Makefile
ccflags-y += -I$(srctree)/lib/lwip/lwip/src/include -I$(srctree)/lib/lwip/u-boot
|
|
|
|
obj-$(CONFIG_$(SPL_)DM_ETH) += net-lwip.o
|
|
obj-$(CONFIG_CMD_DHCP) += dhcp.o
|
|
obj-$(CONFIG_CMD_DNS) += dns.o
|
|
obj-$(CONFIG_CMD_PING) += ping.o
|
|
obj-$(CONFIG_CMD_TFTPBOOT) += tftp.o
|
|
obj-$(CONFIG_WGET) += wget.o
|
|
|
|
ifeq (y,$(CONFIG_WGET_BUILTIN_CACERT))
|
|
$(obj)/builtin_cacert.c: $(CONFIG_WGET_BUILTIN_CACERT_PATH:"%"=%) FORCE
|
|
$(call if_changed,bin2c,builtin_cacert)
|
|
obj-y += builtin_cacert.o
|
|
endif
|