write a patch about ca-certificates' mozilla/certdata2pem.py but using
that adds some new depenency to buildsystem: python3-pyasn1 and
python3-pyasn1-modules. but preprocessing it then download root
certificates in some random places makes even less sense. not sure where
to go
25. 7. 22. 19:29에 Rui Salvaterra 이(가) 쓴 글:
Hi, Seo,
On Tue, 22 Jul 2025 at 05:49, Seo Suchan <[email protected]> wrote:
both mbedtls and openssl doesn't actually check self-signness of turst
anchor, so one can remove signeture from root certificates and reduce
file size while keep compatablity. in current version this would save
about 60kB (223kb current, 158kb without signture) but not sure if this
is something worth making new package for
It does make sense, at least for TINY targets. Feel free to send a
patch or a pull request on GitHub.
Cheers,
Rui
_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
