Skip to content

[security][mbedtls] add support for loading certificates from the file system #1987

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Rbb666 merged 2 commits into from
Apr 22, 2026
Merged

[security][mbedtls] add support for loading certificates from the file system #1987

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
8ce3b6b
[packages][mbedtls] add support for loading certificates from the fil…
Evlers Apr 22, 2026
718088c
[security][mbedtls] remove the mandatory dependency on romfs
Evlers Apr 22, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 17 additions & 0 deletions security/mbedtls/Kconfig
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,24 @@ menuconfig PKG_USING_MBEDTLS

if PKG_USING_MBEDTLS

menuconfig PKG_USING_MBEDTLS_CERTS_FROM_FS
Copy link

Copilot AI Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[discrepancy_with_pr_description/PR 描述]: PR description is only a link / PR 描述仅包含链接

English: The PR description only links to an upstream PR and doesn’t summarize What/Why/How for this repository change (e.g., which Kconfig symbols are added and why). Please add a brief description and list the modified file(s) to make review and future archaeology easier.
中文：PR 描述仅提供了上游 PR 链接，没有说明本仓库的变更内容与动机（What/Why/How，例如新增了哪些 Kconfig 符号、目的是什么）。建议补充简要说明并列出修改文件，便于评审与后续追溯。

Copilot uses AI. Check for mistakes.
bool "Load CA certificates from filesystem directory"
Copy link

Copilot AI Apr 22, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[spelling/拼写与措辞]: Grammar in prompt string / 选项提示语法不完整

English: The prompt text "Load CA certificates from filesystem directory" is missing an article and reads awkwardly. Consider changing it to "Load CA certificates from a filesystem directory" (or "from the filesystem").
中文：提示语 "Load CA certificates from filesystem directory" 缺少冠词，语句不够通顺。建议改为 "Load CA certificates from a filesystem directory"（或 "from the filesystem"）。

Suggested change
bool "Load CA certificates from filesystem directory"
bool "Load CA certificates from a filesystem directory"

Copilot uses AI. Check for mistakes.
default n
help
Enable loading CA certificates from a runtime directory.
All regular files in the configured directory will be parsed.

if PKG_USING_MBEDTLS_CERTS_FROM_FS
config PKG_MBEDTLS_CERTS_DIR
string "CA certificate directory path"
default "/romfs/certs"
help
Directory that stores CA certificate files (PEM/DER).
Example: /romfs/certs or /data/certs
endif

menu "Select Root Certificate"
depends on !PKG_USING_MBEDTLS_CERTS_FROM_FS

config PKG_USING_MBEDTLS_USE_ALL_CERTS
bool "Using all default CA(Use preset CA certificates. Take up more memory)"
Expand Down
Loading