u-boot/net/lwip
Jerome Forissier 12cc6531a1 net: lwip: add support for built-in root certificates
Introduce Kconfig symbols WGET_BUILTIN_CACERT and
WGET_BUILTIN_CACERT_PATH to provide root certificates at build time.

Usage example:

 wget -O cacert.crt https://cacerts.digicert.com/DigiCertTLSECCP384RootG5.crt
 make qemu_arm64_lwip_defconfig
 echo CONFIG_WGET_BUILTIN_CACERT=y >>.config
 echo CONFIG_WGET_BUILTIN_CACERT_PATH=cacert.crt >>.config
 make olddefconfig
 make -j$(nproc) CROSS_COMPILE="ccache aarch64-linux-gnu-"
 qemu-system-aarch64 -M virt -nographic -cpu max \
    -object rng-random,id=rng0,filename=/dev/urandom \
    -device virtio-rng-pci,rng=rng0 -bios u-boot.bin
 => dhcp
 # HTTPS transfer using the builtin CA certificates
 => wget https://digicert-tls-ecc-p384-root-g5.chain-demos.digicert.com/
 1867 bytes transferred in 1 ms (1.8 MiB/s)
 Bytes transferred = 1867 (74b hex)

Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
2025-03-11 14:16:03 +01:00
..
dhcp.c net: lwip: move eth_init() out of new_netif() 2025-02-12 12:36:57 -06:00
dns.c net: lwip: move eth_init() out of new_netif() 2025-02-12 12:36:57 -06:00
eth_internal.h lwip: fix code style issues 2024-11-14 18:14:05 -06:00
Kconfig net: lwip: add CONFIG_LWIP_DEBUG_RXTX 2025-03-11 14:16:03 +01:00
Makefile net: lwip: add support for built-in root certificates 2025-03-11 14:16:03 +01:00
net-lwip.c net: lwip: add CONFIG_LWIP_DEBUG_RXTX 2025-03-11 14:16:03 +01:00
ping.c net: lwip: move eth_init() out of new_netif() 2025-02-12 12:36:57 -06:00
tftp.c net: lwip: move eth_init() out of new_netif() 2025-02-12 12:36:57 -06:00
wget.c net: lwip: add support for built-in root certificates 2025-03-11 14:16:03 +01:00