NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
21e4b43544
kumquat-buildroot/package/mbedtls/Config.in

33 lines
963 B
Plaintext
Raw Normal View History

mbedtls: new package Add the mbed TLS library, formerly known as PolarSSL. The 2.0+ version can live side-by-side with polarssl since it was renamed, hence can be added with no conflict. Use the Apache-2.0 license variant since it's somewhat more flexible, the codebase is the same as the GPLv2 variant, just copyright headers/license file changed. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-12-29 16:03:07 +01:00
config BR2_PACKAGE_MBEDTLS
bool "mbedtls"
help
mbed TLS (formerly known as PolarSSL) makes it trivially easy
for developers to include cryptographic and SSL/TLS
capabilities in their (embedded) products, facilitating this
functionality with a minimal coding footprint.
https://tls.mbed.org/
if BR2_PACKAGE_MBEDTLS
config BR2_PACKAGE_MBEDTLS_PROGRAMS
bool "mbedtls programs"
depends on BR2_USE_MMU # fork()
help
This option enables the installation and the build of
mbed TLS companion programs.
package/mbedtls: make compression support a config option Enabling TLS compression may make mbedTLS vulnerable to the CRIME attack [1]. It should not be enabled unless is is sure CRIME and similar attacks are not applicable to the particulare situation. As zlib is probably enabled in most systems, the user might end up with a vulnerable system without knowing. So, instead of enabling compression support if the zlib package is available, we make the compression support a config option. This way, the user has to explicitly enable compression support and is warned by the help text about the risk. [1] https://tls.mbed.org/kb/how-to/deflate-compression-in-ssl-tls Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-02-06 21:01:23 +01:00
config BR2_PACKAGE_MBEDTLS_COMPRESSION
bool "enable compression support"
select BR2_PACKAGE_ZLIB
help
Enable support for compression of the content data before it
enters the secure channel as described in RFC 3749.
package: remove trailing whitespace Occurrences were searched using [1]: check-package --include-only TrailingSpace $(find * -type f) and manually removed. [1] http://patchwork.ozlabs.org/patch/729666/ Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-04-05 00:50:09 +02:00
package/*/Config.in: fix help text check-package warnings This commit fixes the warnings reported by check-package on the help text of all package Config.in files, related to the formatting of the help text: should start with a tab, then 2 spaces, then at most 62 characters. The vast majority of warnings fixed were caused by too long lines. A few warnings were related to spaces being used instead of a tab to indent the help text. Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2017-12-18 09:21:05 +01:00
Warning: TLS compression may make you vulnerable to the
CRIME attack. You should not enable it unless you know for
sure CRIME and similar attacks are not applicable to your
particular situation.
package/mbedtls: make compression support a config option Enabling TLS compression may make mbedTLS vulnerable to the CRIME attack [1]. It should not be enabled unless is is sure CRIME and similar attacks are not applicable to the particulare situation. As zlib is probably enabled in most systems, the user might end up with a vulnerable system without knowing. So, instead of enabling compression support if the zlib package is available, we make the compression support a config option. This way, the user has to explicitly enable compression support and is warned by the help text about the risk. [1] https://tls.mbed.org/kb/how-to/deflate-compression-in-ssl-tls Signed-off-by: Jörg Krause <joerg.krause@embedded.rocks> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2017-02-06 21:01:23 +01:00
mbedtls: new package Add the mbed TLS library, formerly known as PolarSSL. The 2.0+ version can live side-by-side with polarssl since it was renamed, hence can be added with no conflict. Use the Apache-2.0 license variant since it's somewhat more flexible, the codebase is the same as the GPLv2 variant, just copyright headers/license file changed. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
2015-12-29 16:03:07 +01:00
endif
Reference in New Issue Copy Permalink