mirror of https://github.com/wolfSSL/wolfBoot.git
The wolfSSL bump to master 4aa1ad7a5 wraps all of coding.h in "#ifndef NO_CODING". That block also holds the auto-enable that turns WOLFSSL_KEY_GEN into WOLFSSL_BASE64_ENCODE, so wolfBoot configurations that set both WOLFSSL_KEY_GEN (SECURE_PKCS11) and NO_CODING lost the Base64_Encode() declaration -- and coding.c compiles to nothing under NO_CODING, so the definition is gone too. settings.h still derives WOLFSSL_DER_TO_PEM from WOLFSSL_KEY_GEN, so asn.c kept compiling wc_DerToPemEx() and failed with an implicit declaration of Base64_Encode(). This broke every TrustZone and PKCS11 target. wolfBoot never emits PEM, so define WOLFSSL_NO_DER_TO_PEM whenever NO_CODING is set rather than pulling base64 back in. The check sits after the HAVE_FIPS block, which may undef NO_CODING. wolfTPM's wc_DerToPem() callers are themselves guarded by WOLFSSL_DER_TO_PEM, so they simply drop their optional PEM encoding path. Separately, the update grows wolfboot by 8-136 bytes depending on the configuration, so re-measure every test-size-all entry with the CI container and record the new sizes. |
||
|---|---|---|
| .. | ||
| armclang | ||
| bin-assemble | ||
| check_config | ||
| ci | ||
| delta | ||
| efi | ||
| elf-parser | ||
| fdt-parser | ||
| fs-test | ||
| keytools | ||
| lms | ||
| openocd | ||
| renode | ||
| sbom | ||
| scripts | ||
| squashelf | ||
| test-expect-version | ||
| test-update-server | ||
| tpm | ||
| uart-flash-server | ||
| unit-tests | ||
| xmss | ||
| config.mk | ||
| test-delta.mk | ||
| test-enc.mk | ||
| test-renode.mk | ||
| test.mk | ||
| wolfboot-rpi-devicetree.diff | ||