Re: best embedded ssl for libcurl and howto

[Daniel Stenberg]

On Thu, 3 Jan 2013, JALINDAR wrote:


libcurl- 7.27.0 and polarssl- 1.1.4


Then start with trying the libcurl 7.28.1 release as we did adjustments in the 
PolarSSL support there. As Oscar already mentioned...


--

 / daniel.haxx.se
---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Re: best embedded ssl for libcurl and howto

[Daniel Stenberg]

On Thu, 3 Jan 2013, JALINDAR wrote:

Please don't top-post!


I still find the same for polarssl on web page:
http://curl.haxx.se/docs/install.html


Yes, as that's the correct instruction! I use only that when I build my 
libcurl against PolarSSL and it works just fine for me. (At least the previous 
time I tried.)


I have also observed that while cross compiling libcurl for my embedded 
platform i gave path of polarssl cross compiled for my platform but while 
building my project polarssl gave linking error like this:


So which version of libcurl and which version of PolarSSL are you using?

--

 / daniel.haxx.se
---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Re: best embedded ssl for libcurl and howto

[JALINDAR]

I still find the same for polarssl on web page:
http://curl.haxx.se/docs/install.html

In

 MORE OPTIONS
   


*To build with yassl support instead of OpenSSL or GnuTLS, you must build
 yassl with its OpenSSL emulation enabled and point to that directory root
 with configure --with-ssl.

 To build with NSS support instead of OpenSSL for SSL/TLS, note that
 you need to use both --without-ssl and --with-nss.

 To build with PolarSSL support instead of OpenSSL for SSL/TLS, note that
 you need to use both --without-ssl and --with-polarssl.

 To build with axTLS support instead of OpenSSL for TLS, note that you
 need to use both --without-ssl and --with-axtls.

 To get GSSAPI support, build with --with-gssapi and have the MIT or
 Heimdal Kerberos 5 packages installed.*




I have also observed that while cross compiling libcurl for my embedded
platform i gave path of polarssl cross compiled for my platform but while
building my project polarssl gave linking error like this:


./curl/libcurl.a(libcurl_la-polarssl.o): In function
`Curl_polarssl_version':polarssl.c:(.text+0x280): undefined reference to
`version_get_number'
./curl/libcurl.a(libcurl_la-polarssl.o): In function
`polarssl_connect_common':polarssl.c:(.text+0x4f0): undefined reference to
`ssl_handshake
:polarssl.c:(.text+0x5a4): undefined reference to `havege_init'
:polarssl.c:(.text+0x5dc): undefined reference to `x509parse_crtfile'
:polarssl.c:(.text+0x630): undefined reference to `x509parse_keyfile'
:polarssl.c:(.text+0x674): undefined reference to `x509parse_crlfile'
:polarssl.c:(.text+0x698): undefined reference to `ssl_init'
:polarssl.c:(.text+0x724): undefined reference to `x509parse_cert_info'
:polarssl.c:(.text+0x994): undefined reference to `ssl_set_endpoint'
:polarssl.c:(.text+0x9ac): undefined reference to `ssl_set_authmode'
:polarssl.c:(.text+0x9c4): undefined reference to `ssl_set_rng'
:polarssl.c:(.text+0x9c8): undefined reference to `havege_random'
:polarssl.c:(.text+0x9e4): undefined reference to `ssl_set_bio'
:polarssl.c:(.text+0x9e8): undefined reference to `net_send'
:polarssl.c:(.text+0x9ec): undefined reference to `net_recv'
:polarssl.c:(.text+0xa08): undefined reference to `ssl_set_ciphersuites'
:polarssl.c:(.text+0xa0c): undefined reference to `ssl_default_ciphersuites'
:polarssl.c:(.text+0xa3c): undefined reference to `ssl_set_session'
:polarssl.c:(.text+0xa60): undefined reference to `ssl_set_ca_chain'
:polarssl.c:(.text+0xa84): undefined reference to `ssl_set_own_cert'
:polarssl.c:(.text+0xad8): undefined reference to `x509parse_crtfile'
:polarssl.c:(.text+0xb98): undefined reference to `ssl_set_hostname'
collect2: ld returned 1 exit status

then i included polarssl in my project and gave path of that in my make
file.

so what was the use of giving path while cross compiling the libcurl. I was
expecting that including libcurl library to my project should be enough to
work out with ssl. but have to include polarssl similar to libcurl.

anyone know why??


Thanks









On Thu, Jan 3, 2013 at 7:12 AM, Daniel Stenberg  wrote:

> On Fri, 28 Dec 2012, JALINDAR wrote:
>
>  I could compile with Polarssl
>>
>> I compiled polarssl separately for my embedded platform and then passed
>> the path while compiling libcurl.. i got that from ./config --help and
>> Oscar's mailsame what is mentioned for cyassl on this link:
>> http://curl.haxx.se/docs/**install.html
>>
>> But i wounder it was not mentioned for polarssl and others..
>>
>
> You build with all SSL libraries (except OpenSSL which is the default) the
> same way using configure, cyassl, polarssl, axtls etc.
>
> I've just updated the docs/INSTALL file to mention the same (small)
> procedure for them all.
>
>
> --
>
>  / daniel.haxx.se
> --**--**---
> List admin: 
> http://cool.haxx.se/list/**listinfo/curl-library
> Etiquette:  
> http://curl.haxx.se/mail/**etiquette.html
>
---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

RE: best embedded ssl for libcurl and howto

[Daniel Stenberg]

On Fri, 28 Dec 2012, paul_c...@brainspark.nl wrote:


http://curl.haxx.se/docs/ssl-compared.html


Just noticed that the page is not up to date. The latest PolarSSL release 
does support TLS 1.2. Are you able to change that?


Thanks, updated now!

--

 / daniel.haxx.se
---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Re: best embedded ssl for libcurl and howto

[Daniel Stenberg]

On Fri, 28 Dec 2012, JALINDAR wrote:


I could compile with Polarssl

I compiled polarssl separately for my embedded platform and then passed the 
path while compiling libcurl.. i got that from ./config --help and Oscar's 
mailsame what is mentioned for cyassl on this link: 
http://curl.haxx.se/docs/install.html


But i wounder it was not mentioned for polarssl and others..


You build with all SSL libraries (except OpenSSL which is the default) the 
same way using configure, cyassl, polarssl, axtls etc.


I've just updated the docs/INSTALL file to mention the same (small) procedure 
for them all.


--

 / daniel.haxx.se
---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Re: best embedded ssl for libcurl and howto

[JALINDAR]

I could compile with Polarssl

I compiled polarssl separately for my embedded platform and then passed the
path while compiling libcurl.. i got that from ./config --help and Oscar's
mailsame what is mentioned for cyassl on this link:
http://curl.haxx.se/docs/install.html

But i wounder it was not mentioned for polarssl and others..


Thanks for the help
Jalindar



On Fri, Dec 28, 2012 at 7:10 PM,  wrote:

> Hi Daniel,
>
> Just noticed that the page is not up to date. The latest PolarSSL release
> does support TLS 1.2.
> Are you able to change that?
>
> Best regards,
> Paul Bakker
>
> > -Original Message-
> > From: curl-library [mailto:curl-library-boun...@cool.haxx.se] On Behalf
> Of
> > Daniel Stenberg
> > Sent: vrijdag 28 december 2012 10:25
> > To: libcurl development
> > Subject: Re: best embedded ssl for libcurl and howto
> >
> > On Fri, 28 Dec 2012, JALINDAR wrote:
> >
> > > I am compiling libcurl for my embedded board and want to get to know
> > > how to compile it with ssl support also with http user and password
> > support.
> > >
> > > I have seen openssl, yassl, PolarSSL options for building.
> > >
> > > Which is the best for size?
> >
> > I once started on this: http://curl.haxx.se/docs/ssl-compared.html
> >
> > Cyassl, polarssl and axTLS are three libs that all compete in the "tiny
> > embedded SSL library" division.
> >
> > --
> >
> >   / daniel.haxx.se
> > ---
> > List admin: http://cool.haxx.se/list/listinfo/curl-library
> > Etiquette:  http://curl.haxx.se/mail/etiquette.html
>
> ---
> List admin: http://cool.haxx.se/list/listinfo/curl-library
> Etiquette:  http://curl.haxx.se/mail/etiquette.html
>
---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

RE: best embedded ssl for libcurl and howto

[paul_curl]

The following article should contain all the steps:
https://polarssl.org/kb/how-to/compile-curl-with-polarssl

> -Original Message-
> From: curl-library [mailto:curl-library-boun...@cool.haxx.se] On Behalf Of
> Oscar Koeroo
> Sent: vrijdag 28 december 2012 11:44
> To: curl-library@cool.haxx.se
> Subject: Re: best embedded ssl for libcurl and howto
> 
> On 28-12-12 10:51, JALINDAR wrote:
> > I did this:$ *./configure --without-ssl and --with-polarssl*
> >
> > is it needed to have polarssl library and path set while configuring??
> 
> 
> Hi Jalindar,
> 
> 1.
> Try: ./configure --without-ssl --with-polarssl (without the 'and' word)
> 
> 2.
> PolarSSL needs to be installed including the PolarSSL headers (not just
the
> library) before you run ./configure for it to find the PolarSSL header and
> library files and give a thumbs up before the build.
> 
> I recommend to use PolarSSL from your system's regular software
> repositories, if this is an option to you. If not, then you need to
compile
> PolarSSL yourself and use "--with-polarssl= installation>".
> 
> Side note for your interest: I would recommend to use libcurl version
7.28-1
> in combination with PolarSSL. PolarSSL changed its API between versions
and
> this curl version is tolerant to the old and the new API.
> 
> 
>   Oscar


---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

RE: best embedded ssl for libcurl and howto

[paul_curl]

Hi Daniel,

Just noticed that the page is not up to date. The latest PolarSSL release
does support TLS 1.2.
Are you able to change that?

Best regards,
Paul Bakker

> -Original Message-
> From: curl-library [mailto:curl-library-boun...@cool.haxx.se] On Behalf Of
> Daniel Stenberg
> Sent: vrijdag 28 december 2012 10:25
> To: libcurl development
> Subject: Re: best embedded ssl for libcurl and howto
> 
> On Fri, 28 Dec 2012, JALINDAR wrote:
> 
> > I am compiling libcurl for my embedded board and want to get to know
> > how to compile it with ssl support also with http user and password
> support.
> >
> > I have seen openssl, yassl, PolarSSL options for building.
> >
> > Which is the best for size?
> 
> I once started on this: http://curl.haxx.se/docs/ssl-compared.html
> 
> Cyassl, polarssl and axTLS are three libs that all compete in the "tiny
> embedded SSL library" division.
> 
> --
> 
>   / daniel.haxx.se
> ---
> List admin: http://cool.haxx.se/list/listinfo/curl-library
> Etiquette:  http://curl.haxx.se/mail/etiquette.html

---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Re: best embedded ssl for libcurl and howto

[Oscar Koeroo]

On 28-12-12 10:51, JALINDAR wrote:
> I did this:$ *./configure --without-ssl and --with-polarssl*
> 
> is it needed to have polarssl library and path set while configuring??


Hi Jalindar,

1.
Try: ./configure --without-ssl --with-polarssl
(without the 'and' word)

2.
PolarSSL needs to be installed including the PolarSSL headers (not just the
library) before you run ./configure for it to find the PolarSSL header and
library files and give a thumbs up before the build.

I recommend to use PolarSSL from your system's regular software
repositories, if this is an option to you. If not, then you need to compile
PolarSSL yourself and use "--with-polarssl=".

Side note for your interest: I would recommend to use libcurl version 7.28-1
in combination with PolarSSL. PolarSSL changed its API between versions and
this curl version is tolerant to the old and the new API.


Oscar



smime.p7s
Description: S/MIME Cryptographic Signature
---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Re: best embedded ssl for libcurl and howto

[JALINDAR]

Actually on this link:  http://curl.haxx.se/docs/install.html

It is said about yassl:

 *To build with yassl support instead of OpenSSL or GnuTLS, you must build
 yassl with its OpenSSL emulation enabled and point to that directory root
 with configure --with-ssl.*

But for polarssl only this is said:

* To build with PolarSSL support instead of OpenSSL for SSL/TLS, note that
 you need to use both --without-ssl and --with-polarssl.*

so i did not place library or path set ..assuming curl do have
it and it will get what ever needed for ssl automatically??

Is this assumption is wrong and i have to add it similar to yassl??

Thanks
Jalindar



On Fri, Dec 28, 2012 at 5:51 PM, JALINDAR  wrote:

> Thanks Daniel..
>
> I tried with polarssl.
>
> after reading this: http://curl.haxx.se/docs/install.html
>
> I did this:$ *./configure --without-ssl and --with-polarssl*
>
> expecting it will be configured with polarssl but last log shows:
>
> *SSL support: no
> (--with-{ssl,gnutls,nss,polarssl,cyassl,axtls,winssl} )*
>
> *Protocols:HTTP*
>
> is it needed to have polarssl library and path set while configuring??
>
> Thanks
> Jalindar
>
>
>
>
>
> On Fri, Dec 28, 2012 at 5:25 PM, Daniel Stenberg  wrote:
>
>> On Fri, 28 Dec 2012, JALINDAR wrote:
>>
>>  I am compiling libcurl for my embedded board and want to get to know how
>>> to compile it with ssl support also with http user and password support.
>>>
>>> I have seen openssl, yassl, PolarSSL options for building.
>>>
>>> Which is the best for size?
>>>
>>
>> I once started on this: 
>> http://curl.haxx.se/docs/ssl-**compared.html
>>
>> Cyassl, polarssl and axTLS are three libs that all compete in the "tiny
>> embedded SSL library" division.
>>
>> --
>>
>>  / daniel.haxx.se
>> --**--**---
>> List admin: 
>> http://cool.haxx.se/list/**listinfo/curl-library
>> Etiquette:  
>> http://curl.haxx.se/mail/**etiquette.html
>>
>
>
>
>
>
---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Re: best embedded ssl for libcurl and howto

[Daniel Stenberg]

On Fri, 28 Dec 2012, JALINDAR wrote:

I am compiling libcurl for my embedded board and want to get to know how to 
compile it with ssl support also with http user and password support.


I have seen openssl, yassl, PolarSSL options for building.

Which is the best for size?


I once started on this: http://curl.haxx.se/docs/ssl-compared.html

Cyassl, polarssl and axTLS are three libs that all compete in the "tiny 
embedded SSL library" division.


--

 / daniel.haxx.se
---
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html