Cover Letter Detail
Show a cover letter.
GET /api/covers/2055647/?format=api
{ "id": 2055647, "url": "http://patchwork.ozlabs.org/api/covers/2055647/?format=api", "web_url": "http://patchwork.ozlabs.org/project/uboot/cover/20250305142650.2966738-1-jerome.forissier@linaro.org/", "project": { "id": 18, "url": "http://patchwork.ozlabs.org/api/projects/18/?format=api", "name": "U-Boot", "link_name": "uboot", "list_id": "u-boot.lists.denx.de", "list_email": "u-boot@lists.denx.de", "web_url": null, "scm_url": null, "webscm_url": null, "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<20250305142650.2966738-1-jerome.forissier@linaro.org>", "list_archive_url": null, "date": "2025-03-05T14:26:41", "name": "[v2,0/6] net: lwip: root certificates", "submitter": { "id": 69192, "url": "http://patchwork.ozlabs.org/api/people/69192/?format=api", "name": "Jerome Forissier", "email": "jerome.forissier@linaro.org" }, "mbox": "http://patchwork.ozlabs.org/project/uboot/cover/20250305142650.2966738-1-jerome.forissier@linaro.org/mbox/", "series": [ { "id": 447137, "url": "http://patchwork.ozlabs.org/api/series/447137/?format=api", "web_url": "http://patchwork.ozlabs.org/project/uboot/list/?series=447137", "date": "2025-03-05T14:26:41", "name": "net: lwip: root certificates", "version": 2, "mbox": "http://patchwork.ozlabs.org/series/447137/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/covers/2055647/comments/", "headers": { "Return-Path": "<u-boot-bounces@lists.denx.de>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@legolas.ozlabs.org", "Authentication-Results": [ "legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=linaro.org header.i=@linaro.org header.a=rsa-sha256\n header.s=google header.b=Q1/lA3Y+;\n\tdkim-atps=neutral", "legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=lists.denx.de\n (client-ip=85.214.62.61; helo=phobos.denx.de;\n envelope-from=u-boot-bounces@lists.denx.de; receiver=patchwork.ozlabs.org)", "phobos.denx.de;\n dmarc=pass (p=none dis=none) header.from=linaro.org", "phobos.denx.de;\n spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de", "phobos.denx.de;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=linaro.org header.i=@linaro.org header.b=\"Q1/lA3Y+\";\n\tdkim-atps=neutral", "phobos.denx.de;\n dmarc=pass (p=none dis=none) header.from=linaro.org", "phobos.denx.de;\n spf=pass smtp.mailfrom=jerome.forissier@linaro.org" ], "Received": [ "from phobos.denx.de (phobos.denx.de [85.214.62.61])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange X25519 server-signature ECDSA (secp384r1))\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4Z7FHq2h71z1yVg\n\tfor <incoming@patchwork.ozlabs.org>; Thu, 6 Mar 2025 01:27:19 +1100 (AEDT)", "from h2850616.stratoserver.net (localhost [IPv6:::1])\n\tby phobos.denx.de (Postfix) with ESMTP id 19C6D81280;\n\tWed, 5 Mar 2025 15:27:18 +0100 (CET)", "by phobos.denx.de (Postfix, from userid 109)\n id 5C6BF811C1; Wed, 5 Mar 2025 15:27:16 +0100 (CET)", "from mail-wr1-x42a.google.com (mail-wr1-x42a.google.com\n [IPv6:2a00:1450:4864:20::42a])\n (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits))\n (No client certificate requested)\n by phobos.denx.de (Postfix) with ESMTPS id 35D6B808B6\n for <u-boot@lists.denx.de>; Wed, 5 Mar 2025 15:27:14 +0100 (CET)", "by mail-wr1-x42a.google.com with SMTP id\n ffacd0b85a97d-390fdaf2897so3991626f8f.0\n for <u-boot@lists.denx.de>; Wed, 05 Mar 2025 06:27:14 -0800 (PST)", "from builder.. ([2a01:e0a:3cb:7bb0:369c:9bd8:7c87:9a39])\n by smtp.gmail.com with ESMTPSA id\n ffacd0b85a97d-391188029e0sm5442456f8f.52.2025.03.05.06.27.13\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Wed, 05 Mar 2025 06:27:13 -0800 (PST)" ], "X-Spam-Checker-Version": "SpamAssassin 3.4.2 (2018-09-13) on phobos.denx.de", "X-Spam-Level": "", "X-Spam-Status": "No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,\n DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_BLOCKED,\n SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2", "DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=linaro.org; s=google; t=1741184833; x=1741789633; darn=lists.denx.de;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:from:to:cc:subject:date:message-id:reply-to;\n bh=uTZuNaTK+mvgzVaEWxdEblzN7YSYIb+54sho3OLonmI=;\n b=Q1/lA3Y+ASANgIq7naLlJ0rnNwUmsWVvuqkPL3210EZ+g4hgc5lUznnH5CshXu6HZl\n x4awlz1RFa5IvgsT1vHYA6rOx24BdRlm039gtxBpv0hDMtP9hcweTCBZfXE41NkgLYTg\n GYHrQ/ywdKN96dyU5Ah+uaj2cQrtmhk6DqnPJGBDbJk6hekTIi/a/56AeXNnhAkSUfWD\n Mr/CfViuX2jxfJiJ2wQnOqC1DQtW/g/oT9RxpJjqO0RTHD0r8svwT6A0qWw1OhK3Pxc9\n QQU5tlt91nN+1x1D4sLwVosM/pveoGGV2L47oEdsH3iuJa43nZYO3tpsK0mmmuA1z/Hn\n qSTw==", "X-Google-DKIM-Signature": "v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20230601; t=1741184833; x=1741789633;\n h=content-transfer-encoding:mime-version:message-id:date:subject:cc\n :to:from:x-gm-message-state:from:to:cc:subject:date:message-id\n :reply-to;\n bh=uTZuNaTK+mvgzVaEWxdEblzN7YSYIb+54sho3OLonmI=;\n b=rCvAuZSG9UpkQNUs+2qACfyYaCSUW14OBbPSfYESXIt+0n+tmeV/nvclDx/34YxZH8\n 8U9DwiEP+S2MC7Vqp6HE/WUcUQ8DFPlMNXlgRZrrzP/GjEtaUz0GXlQFeFmhohXeGGGj\n bYrEsIHB3ZE/ghq3QTM2cc4CZlnoitudjSc19bIwZMmNJkYLhOCXaBJ1j+YhaO7v2fUU\n RAEh9EMda2uRpKGA+cydyy8c0lkvGb38RMIWJrcVow5stdMemTgcwO+ys3ldn5QdUR79\n RbOXvjDA5Ru7bIFmURHsqeb/v26WPcUDkiWc6ImmQJBMYQDi+twi93Yh0M49epg3p/7G\n 0kNw==", "X-Gm-Message-State": "AOJu0Yw8yN45UdSED9yNKOH1DG8dvDw4H8PsAIhhA2yjnVvTofSYqvg2\n WhVoBKtH5C2nzpr2FO1kKz4souv8NEUeZ/ySVr/e44gFA4pvGCvEFwyKUDAk1dKplk9EFK7zqoZ\n U", "X-Gm-Gg": "ASbGncurD9VggEMPcIPxtCXvkeRLThwJn8iC5zVkRNRih0L4E8h5V0c6M+/pbN9rThb\n uco8CXz8y+tpO5pT8inOXFm+aB9Z8Lvi/GNZe06iEcOlP6efv1r1sGUYFOgMgEcuCGxBqCgxPn0\n It8F7p7Sc5w9PVQYmutxG+E5Sqi1fLYiEXYgXbReab0r2VVWd0ISbZGp1ZpNIE5r14h5kgOqe8Z\n 4Sf0LlaN+fxuG+BfY/eHs4cswdx2Gtgpyt+gqewjU0sYe77W7WSCwsYs+/pbHQyjhPhBrX/xfXS\n c8AWmUOgOgQPtlvtwk/GkZkcQX9HX/kn7x6Gv4TXYSRHz6DUOiGH4w==", "X-Google-Smtp-Source": "\n AGHT+IHDufQ2azqn94c0jgJE1ZJm4c/vs3LmNq+fnzs970L8gwSCT+V4wnKDvnvhJ3wbIl/IUXVKVw==", "X-Received": "by 2002:a5d:6d8f:0:b0:390:fbcf:56d5 with SMTP id\n ffacd0b85a97d-3911f58f3a1mr3394838f8f.0.1741184833454;\n Wed, 05 Mar 2025 06:27:13 -0800 (PST)", "From": "Jerome Forissier <jerome.forissier@linaro.org>", "To": "u-boot@lists.denx.de", "Cc": "Ilias Apalodimas <ilias.apalodimas@linaro.org>,\n Jerome Forissier <jerome.forissier@linaro.org>", "Subject": "[PATCH v2 0/6] net: lwip: root certificates", "Date": "Wed, 5 Mar 2025 15:26:41 +0100", "Message-ID": "<20250305142650.2966738-1-jerome.forissier@linaro.org>", "X-Mailer": "git-send-email 2.43.0", "MIME-Version": "1.0", "Content-Transfer-Encoding": "8bit", "X-BeenThere": "u-boot@lists.denx.de", "X-Mailman-Version": "2.1.39", "Precedence": "list", "List-Id": "U-Boot discussion <u-boot.lists.denx.de>", "List-Unsubscribe": "<https://lists.denx.de/options/u-boot>,\n <mailto:u-boot-request@lists.denx.de?subject=unsubscribe>", "List-Archive": "<https://lists.denx.de/pipermail/u-boot/>", "List-Post": "<mailto:u-boot@lists.denx.de>", "List-Help": "<mailto:u-boot-request@lists.denx.de?subject=help>", "List-Subscribe": "<https://lists.denx.de/listinfo/u-boot>,\n <mailto:u-boot-request@lists.denx.de?subject=subscribe>", "Errors-To": "u-boot-bounces@lists.denx.de", "Sender": "\"U-Boot\" <u-boot-bounces@lists.denx.de>", "X-Virus-Scanned": "clamav-milter 0.103.8 at phobos.denx.de", "X-Virus-Status": "Clean" }, "content": "This series adds support for HTTP server authentication using root (CA)\ncertificates.\n\nAs a first step, the wget command is extended to support a sub-command:\ncacert <addr> <size>. The memory region shall contain the CA\ncertificates. With this, it is possible to load the certificates from\nstorage or get them from the network for example, which is convenient\nfor testing at least. The Kconfig symbol for this feature is\nWGET_CACERT=y.\n\nThen new Kconfig symbols are added to support providing the certificates\nat build time as a DER encoded X509 collection: WGET_BUILTIN_CACERT=y\nand WGET_BUILTIN_CACERT_PATH=<some path>.\n\nAn example of how to use this feature is given in patch \"doc: cmd: wget:\ndocument cacert subcommand\".\n\nChanges in v2:\n- Drop PEM support. It is unnecessary since conversion from PEM to DER\nis easy, and PEM takes more space in memory. Another reason is the ugly\nhack requiring to allocate one more byte for the null terminator in\ncase the file is PEM (therefore, text).\n- Add 'wget cacert none|optional|required'\n- Replace '#if defined CONFIG_X' with '#if CONFIG_IS_ENABLED(X)' in\nnet/lwip/wget.c Do NOT replace '#if defined(CONFIG_X)' in net/net-lwip.c\nfor consistency with how other symbols are treated in that file.\n- Make builtin_cacert const\n- Make cacert_size static\n- BUILTIN_CACERT selects BUILD_BIN2C\n- Add documentation in doc/cmd/wget.rst\n- Apply review tags\n\nJerome Forissier (6):\n net: lwip: extend wget to support CA (root) certificates\n lwip: tls: enforce checking of server certificates based on CA\n availability\n lwip: tls: warn when no CA exists amd log certificate validation\n errors\n net: lwip: add support for built-in root certificates\n doc: cmd: wget: document cacert subcommand\n configs: qemu_arm64_lwip_defconfig: enable WGET_CACERT\n\n cmd/Kconfig | 22 +++\n cmd/net-lwip.c | 21 ++-\n configs/qemu_arm64_lwip_defconfig | 1 +\n doc/usage/cmd/wget.rst | 82 +++++++++-\n .../src/apps/altcp_tls/altcp_tls_mbedtls.c | 9 +-\n .../lwip/apps/altcp_tls_mbedtls_opts.h | 6 -\n net/lwip/Makefile | 6 +\n net/lwip/wget.c | 141 +++++++++++++++++-\n 8 files changed, 273 insertions(+), 15 deletions(-)" }