Merge new functions into the upstream axtls repository

Question

Merge new functions into the upstream axtls repository

slaff opened this issue 8 years ago · comments

There are new and useful functions that are appearing in this repository. It would be great if we can push them to the upstream axTLS repository.

Ivan Grokhotkov · Answer 1 · Tue Mar 15 2016 17:58:03 GMT+0800 (China Standard Time)

That would probably be a good effort, although I imagine it may take quite a lot of resources.
We should rebase our changes on the latest upstream version first (#9).

Mirko Vogt · Answer 2 · Mon Mar 25 2019 04:00:00 GMT+0800 (China Standard Time)

Is there any news on this?
I'm asking specifically, because I'm running out of memory with mbedtls on ESP32 (using micropython*) and, from evaluating code and guessing, I expect axtls being much more lightweight.
However, unlike this fork, upstream axtls does not support verification against a CA so far, which is a major drawback.
Is there any plan on upstreaming those changes? If not, could you provide a rough estimate on how much is ESP8266 specific and might/will conflict?

Thanks a lot in advance!

*micropython supports both mbedtls as well as axtls as ssl backend

Ivan Grokhotkov · Answer 3 · Mon Mar 25 2019 22:10:22 GMT+0800 (China Standard Time)

@mirko On the ESP32, you can enable CONFIG_MBEDTLS_ASYMMETRIC_CONTENT_LEN (https://docs.espressif.com/projects/esp-idf/en/latest/api-reference/kconfig.html#config-mbedtls-asymmetric-content-len) to reduce the amount of RAM used by the outgoing fragment buffer.