[PATCH 1/3] mbedtls: fix incorrect kconfig dependencies on mbedtls
Raymond Mao
raymond.mao at linaro.org
Mon Jan 27 16:16:48 CET 2025
Currently building with WGET_HTTPS,NET_LWIP and MBEDTLS_LIB failed
due to a few incorrect kconfig dependencies.
Fix these and clarify what is the purpose of MBEDTLS_LIB_CRYPTO_ALT.
Signed-off-by: Raymond Mao <raymond.mao at linaro.org>
---
cmd/Kconfig | 1 -
lib/mbedtls/Kconfig | 8 +++++---
2 files changed, 5 insertions(+), 4 deletions(-)
diff --git a/cmd/Kconfig b/cmd/Kconfig
index 1a0985ca479..071601b5ac2 100644
--- a/cmd/Kconfig
+++ b/cmd/Kconfig
@@ -2161,7 +2161,6 @@ config WGET_HTTPS
select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
select X509_CERTIFICATE_PARSER
select PKCS7_MESSAGE_PARSER
- select MBEDTLS_LIB_CRYPTO
select MBEDTLS_LIB_TLS
select RSA_VERIFY_WITH_PKEY
select X509_CERTIFICATE_PARSER
diff --git a/lib/mbedtls/Kconfig b/lib/mbedtls/Kconfig
index aa82336ef14..17ed2bc71de 100644
--- a/lib/mbedtls/Kconfig
+++ b/lib/mbedtls/Kconfig
@@ -116,6 +116,7 @@ endif # LEGACY_CRYPTO_BASIC
config LEGACY_CRYPTO_CERT
bool "legacy certificate libraries"
+ depends on LEGACY_CRYPTO
select ASN1_DECODER_LEGACY if ASN1_DECODER
select ASYMMETRIC_PUBLIC_KEY_LEGACY if \
ASYMMETRIC_PUBLIC_KEY_SUBTYPE
@@ -210,12 +211,13 @@ endif # LEGACY_CRYPTO
if MBEDTLS_LIB
config MBEDTLS_LIB_CRYPTO_ALT
- bool "MbedTLS crypto alternatives"
+ bool "Use legacy crypto libraries as MbedTLS alternatives"
depends on MBEDTLS_LIB && !MBEDTLS_LIB_CRYPTO
select LEGACY_CRYPTO_BASIC
default y if MBEDTLS_LIB && !MBEDTLS_LIB_CRYPTO
help
- Enable MbedTLS crypto alternatives.
+ Enable MbedTLS crypto alternatives and replace it with legacy crypto
+ libraries.
Mutually incompatible with MBEDTLS_LIB_CRYPTO.
config MBEDTLS_LIB_CRYPTO
@@ -451,7 +453,7 @@ config MBEDTLS_LIB_TLS
depends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS
depends on ASN1_DECODER_MBEDTLS
depends on ASYMMETRIC_PUBLIC_KEY_MBEDTLS
- depends on MBEDTLS_LIB_CRYPTO
+ depends on MBEDTLS_LIB
help
Enable MbedTLS TLS library. Required for HTTPs support
in wget
--
2.25.1
More information about the U-Boot
mailing list