diff options
| author | Scott Shawcroft <scott@tannewt.org> | 2020-11-30 17:02:26 -0800 |
|---|---|---|
| committer | Scott Shawcroft <scott@tannewt.org> | 2020-11-30 17:02:26 -0800 |
| commit | 4ac4faaaf684bfb3713f54de5fca452e64847700 (patch) | |
| tree | 444bec858f12aa4293c5a9ba13f9a91ace8b4453 /ports | |
| parent | 5b3c930e384ef6440f0f7b5167bb54ea68a8be76 (diff) | |
Use nina-fw root certs
That way we have one set we use for all of Adafruit's connected
devices.
Diffstat (limited to 'ports')
| -rw-r--r-- | ports/esp32s2/certificates/README.md | 3 | ||||
| m--------- | ports/esp32s2/certificates/nina-fw | 0 | ||||
| -rw-r--r-- | ports/esp32s2/esp-idf-config/sdkconfig.defaults | 7 |
3 files changed, 7 insertions, 3 deletions
diff --git a/ports/esp32s2/certificates/README.md b/ports/esp32s2/certificates/README.md new file mode 100644 index 000000000..dd5cf25b0 --- /dev/null +++ b/ports/esp32s2/certificates/README.md @@ -0,0 +1,3 @@ +We share root certificates with the nina-fw to ensure they both use the same roots. + +https://github.com/adafruit/nina-fw diff --git a/ports/esp32s2/certificates/nina-fw b/ports/esp32s2/certificates/nina-fw new file mode 160000 +Subproject f2a0e601b23212dda4fe305eab30af49a7c7fb4 diff --git a/ports/esp32s2/esp-idf-config/sdkconfig.defaults b/ports/esp32s2/esp-idf-config/sdkconfig.defaults index 025b05caa..53b169e39 100644 --- a/ports/esp32s2/esp-idf-config/sdkconfig.defaults +++ b/ports/esp32s2/esp-idf-config/sdkconfig.defaults @@ -575,10 +575,11 @@ CONFIG_MBEDTLS_DYNAMIC_FREE_CONFIG_DATA=y # Certificate Bundle # CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=y -CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=y +# CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL is not set # CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_CMN is not set -# CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_NONE is not set -# CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE is not set +CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_NONE=y +CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE=y +CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE_PATH="certificates/nina-fw/data/roots.pem" # end of Certificate Bundle # CONFIG_MBEDTLS_ECP_RESTARTABLE is not set |