[Buildroot] [PATCH] package/openvpn: add option to use mbed TLS instead of OpenSSL

[Thomas Petazzoni <thomas.petazzoni@bootlin.com>]

Hello Ed,

On Fri, 15 May 2020 23:39:09 +0300
Ed Spiridonov <edo.rus@gmail.com> wrote:

> On Fri, May 15, 2020 at 11:10 PM Thomas Petazzoni
> <thomas.petazzoni@bootlin.com> wrote:
> > Could you change this to:
> >
> >         select BR2_PACKAGE_OPENSSL if !BR2_PACKAGE_MBEDTLS  
> 
> Ok. But I would rather use mbed TLS as the default option:
>         select BR2_PACKAGE_MBEDTLS if !BR2_PACKAGE_OPENSSL
> 
> OpenVPN + mbed TLS combination is well tested (Android/iOS builds use mbed TLS).

The idea of using select BR2_PACKAGE_OPENSSL if !BR2_PACKAGE_MBEDTLS
was to keep the current behavior, i.e be backward compatible.

> > This way, we use mbedtls if available, otherwise we use OpenSSL.  
> 
> BTW, there is "--disable-crypto" build option, but I'm unsure if anyone use it.
> 
> P.?S. What about other options? OpenWRT has lot of them
> https://github.com/openwrt/openwrt/blob/master/package/network/services/openvpn/Config-openssl.in
> This helps make the binary more compact.

Feel free to add support for more options, patches welcome. Thanks!

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com