Crash_Override/OVMS3-idf
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge branch 'bugfix/crt_bundle_no_config_file' into 'master'

Browse source 
esp_crt_bundle: fixes the "No CA Chain is set" error

See merge request espressif/esp-idf!8851
This commit is contained in:
Ivan Grokhotkov 2020-05-22 09:34:32 +08:00
parent 7d75213674 f72d259622
commit a2d7e8cbba
2 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
components/mbedtls/CMakeLists.txt
View file

@ -120,7 +120,7 @@ endif()
set_property(TARGET mbedcrypto APPEND PROPERTY LINK_INTERFACE_LIBRARIES mbedtls)
# Link mbedtls libraries to component library
target_link_libraries(${COMPONENT_LIB} INTERFACE ${mbedtls_targets})
target_link_libraries(${COMPONENT_LIB} PUBLIC ${mbedtls_targets})
# Link esp-cryptoauthlib to mbedtls
if(CONFIG_ATCA_MBEDTLS_ECDSA)

5
components/mbedtls/esp_crt_bundle/esp_crt_bundle.c
View file

@ -196,9 +196,10 @@ esp_err_t esp_crt_bundle_attach(void *conf)
* This is only required so that the
* cacert_ptr passes non-NULL check during handshake
*/
mbedtls_ssl_config *ssl_conf = (mbedtls_ssl_config *)conf;
mbedtls_x509_crt_init(&s_dummy_crt);
((mbedtls_ssl_config *)conf)->ca_chain = &s_dummy_crt;
mbedtls_ssl_conf_verify((mbedtls_ssl_config *)conf, esp_crt_verify_callback, NULL);
mbedtls_ssl_conf_ca_chain(ssl_conf, &s_dummy_crt, NULL);
mbedtls_ssl_conf_verify(ssl_conf, esp_crt_verify_callback, NULL);
}
return ret;