diff mbox series

[ansible] inventories: prod: 21.02: include TLS support

Message ID 20210514083238.13878-1-ynezz@true.cz
State Accepted
Delegated to: Petr Štetiar
Headers show
Series [ansible] inventories: prod: 21.02: include TLS support | expand

Commit Message

Petr Štetiar May 14, 2021, 8:32 a.m. UTC
OpenWrt 21.02 currently ships with wolfssl and LuCI for http.  It would
be nice to also have https support included in the default images.

To add this the following packages have to be added:

 * luci-ssl      (969 Bytes ipkg)
 * px5g-wolfssl (5216 bytes ipkg)

The ath79 images increased by 2.2 KBytes when these packages were
included.

Automatic redirection from HTTP to HTTPS was disabled in commit
0cf3c5dd7257 ("uhttpd: don't redirect to HTTPS by default") so folks
willing to use HTTPS would need to reach that service explicitly.

References: https://lists.infradead.org/pipermail/openwrt-devel/2021-May/035056.html
Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
Signed-off-by: Petr Štetiar <ynezz@true.cz>
---
 inventories/prod/group_vars/all/02-openwrt-prod.yml | 1 +
 1 file changed, 1 insertion(+)

Comments

Paul Spooren May 14, 2021, 9:55 a.m. UTC | #1
On 5/14/21 10:32 AM, Petr Štetiar wrote:
> OpenWrt 21.02 currently ships with wolfssl and LuCI for http.  It would
> be nice to also have https support included in the default images.
>
> To add this the following packages have to be added:
>
>   * luci-ssl      (969 Bytes ipkg)
>   * px5g-wolfssl (5216 bytes ipkg)
>
> The ath79 images increased by 2.2 KBytes when these packages were
> included.
>
> Automatic redirection from HTTP to HTTPS was disabled in commit
> 0cf3c5dd7257 ("uhttpd: don't redirect to HTTPS by default") so folks
> willing to use HTTPS would need to reach that service explicitly.
>
> References: https://lists.infradead.org/pipermail/openwrt-devel/2021-May/035056.html
> Acked-by: Hauke Mehrtens <hauke@hauke-m.de>
> Signed-off-by: Petr Štetiar <ynezz@true.cz>
> ---
Acked-by: Paul Spooren <mail@aparcar.org>
>   inventories/prod/group_vars/all/02-openwrt-prod.yml | 1 +
>   1 file changed, 1 insertion(+)
>
> diff --git a/inventories/prod/group_vars/all/02-openwrt-prod.yml b/inventories/prod/group_vars/all/02-openwrt-prod.yml
> index 63ad0511b0de..f257fdcb10d5 100644
> --- a/inventories/prod/group_vars/all/02-openwrt-prod.yml
> +++ b/inventories/prod/group_vars/all/02-openwrt-prod.yml
> @@ -149,6 +149,7 @@ buildmaster:
>         CONFIG_KERNEL_KALLSYMS=n
>         CONFIG_AUTOREMOVE=y
>         CONFIG_PACKAGE_luci=y
> +      CONFIG_PACKAGE_luci-ssl=y
>         CONFIG_IB=y
>         CONFIG_SDK=y
>   
>
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel@lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-devel
diff mbox series

Patch

diff --git a/inventories/prod/group_vars/all/02-openwrt-prod.yml b/inventories/prod/group_vars/all/02-openwrt-prod.yml
index 63ad0511b0de..f257fdcb10d5 100644
--- a/inventories/prod/group_vars/all/02-openwrt-prod.yml
+++ b/inventories/prod/group_vars/all/02-openwrt-prod.yml
@@ -149,6 +149,7 @@  buildmaster:
       CONFIG_KERNEL_KALLSYMS=n
       CONFIG_AUTOREMOVE=y
       CONFIG_PACKAGE_luci=y
+      CONFIG_PACKAGE_luci-ssl=y
       CONFIG_IB=y
       CONFIG_SDK=y