Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CI run #13943

Closed
wants to merge 54 commits into from
Closed

CI run #13943

wants to merge 54 commits into from

Conversation

vlilleboe
Copy link
Contributor

No description provided.

@tomi-font tomi-font removed the request for review from a team February 9, 2024 13:32
Vge0rge and others added 19 commits February 10, 2024 22:45
Signed-off-by: Georgios Vasilakis <georgios.vasilakis@nordicsemi.no>
Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
Signed-off-by: Georgios Vasilakis <georgios.vasilakis@nordicsemi.no>
Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
By setting CONFIG_PSA_WANT_KEY_TYPE_RSA_KEY_PAIR RSA got enabled by
default, moving it into the rsa.conf will only enabled it when needed.

Also adding the Key size 2048 as this is size of the used certificate

Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
For TLS some Mbed TLS config defines are needed, even though PSA crypto
is used, as TLS is still using legacy crypto. So that mbedTLS legacy
crypto is added in the non-secure app. To configure it the Kconfig
options are set and the corresboding cmake defines, but they didn't
get parsed in the nrf-config.h file so adding this with this commit

Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
Before this MBEDTLS option was enabled by default, causing build issues
Adding it as Kconfig enables it to be enabled when needed

Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
Remove header files which exist in the Oberon PSA core
under the mbedtls folder which are not modified by Oberon.

Signed-off-by: Georgios Vasilakis <georgios.vasilakis@nordicsemi.no>
Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
Enable a key size of 2048 instead of 1024 as the source code
explicitly uses this key size.

It is not clear how this has been passing CI earlier.

Signed-off-by: Sebastian Bøe <sebastian.boe@nordicsemi.no>
Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
The HMAC uses SHA-256 so we should also have it as a dependency

Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
Stop testing redundant tests. They are failing and don't provide
enough value to be maintained.

Signed-off-by: Sebastian Bøe <sebastian.boe@nordicsemi.no>
Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
openthread is build with C++ which has an issue with { 0 }
initialization if there are more then one struct nested inside another
struct. Therefor using {  } which should result in the same code and does
not result in a build warning

Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
PKCS7 is needed for certificate parsing, which also requires CBC mode,
therefore enabling both

Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
PKCS7 is needed for certificate parsing, which also requires CBC mode,
therefore enabling both

Signed-off-by: Markus Swarowsky <markus.swarowsky@nordicsemi.no>
Matter update to use the new Mbed TLS defines.

Signed-off-by: Vidar Lillebø <vidar.lillebo@nordicsemi.no>
Add more cases to quarantine_zephyr. These are redundant tests
that are failing and don't provide enough value to be maintained.

Signed-off-by: Vidar Lillebø <vidar.lillebo@nordicsemi.no>
PKCS5 uses CBC with PKCS7 padding, so we're adding the dependency
to Kconfig.

Signed-off-by: Vidar Lillebø <vidar.lillebo@nordicsemi.no>
Since we don't provide the function anymore.

Signed-off-by: Georgios Vasilakis <georgios.vasilakis@nordicsemi.no>
We had a patch there because we enabled the
MBEDTLS_PLATFORM_ZEROIZE_ALT when CryptoCell
is enabled but we don't need this anymore since
the platform zeroize function not not provided
by the CryptoCell platform library anymore.

Signed-off-by: Georgios Vasilakis <georgios.vasilakis@nordicsemi.no>
@thst-nordic
Copy link
Contributor

if the PR is not ready to be reviewed you should leave it in 'draft' state.
You can trigger draft PR's manually from jenkins UI.

@vlilleboe vlilleboe marked this pull request as draft February 12, 2024 08:57
Vge0rge and others added 6 commits February 12, 2024 10:55
uoscore isn't ported to use NRF security so
it is not supported.

Signed-off-by: Georgios Vasilakis <georgios.vasilakis@nordicsemi.no>
The new mbedtls revision has brought in more mbedtls legacy
sources. Add these to the build as well.

Signed-off-by: Sebastian Bøe <sebastian.boe@nordicsemi.no>
We recently deleted the oberon "legacy mbedtls" header files, in this
patch we add some cmake code for also adding mbedtls "legacy mbedtls"
header files to path to replace these deleted files.

Signed-off-by: Sebastian Bøe <sebastian.boe@nordicsemi.no>
Fix project config for wifi board

Signed-off-by: Sebastian Bøe <sebastian.boe@nordicsemi.no>
add missing deps in WPA_SUPP_CRYPTO_

Signed-off-by: Sebastian Bøe <sebastian.boe@nordicsemi.no>
MBEDTLS_RSA_C is now partially implemented using PSA APIs, so we need to
add the requirement that these are enabled.

Signed-off-by: Vidar Lillebø <vidar.lillebo@nordicsemi.no>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants