github-personal/openwrt-builder
1
0
Fork 0
mirror of https://github.com/outbackdingo/openwrt-builder.git synced 2026-01-27 10:19:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Some optimalization related to wolfssl

Browse Source
This commit is contained in:
Daniel Pawlik
2025-05-27 15:20:38 +02:00
parent 696f18d50d
commit f15e9bc3f7
2 changed files with 9 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
configs/common/wolfssl
View File

@@ -1,18 +1,10 @@
#### replace mbedtls with openssl - remember to leave commented "is not set" or remove it!
### NOTE: switch, when package is available
CONFIG_PACKAGE_apk-mbedtls=y
# CONFIG_PACKAGE_apk-wolfssl is not set
CONFIG_PACKAGE_libustream-mbedtls=y
CONFIG_PACKAGE_wpad-wolfssl=y
CONFIG_PACKAGE_libustream-mbedtls=m
CONFIG_PACKAGE_libustream-wolfssl=y
CONFIG_PACKAGE_libwolfssl=y
# CONFIG_PACKAGE_wpad-mbedtls is not set
# CONFIG_PACKAGE_wpad-basic-mbedtls is not set
# CONFIG_PACKAGE_wpad-basic-openssl is not set
# CONFIG_LIBCURL_MBEDTLS is not set
CONFIG_LIBCURL_WOLFSSL=y
CONFIG_LUA_ECO_WOLFSSL=y
# CONFIG_LUA_ECO_MBEDTLS is not set
#### replace mbedtls with openssl - remember to leave commented "is not set" or remove it!
@@ -21,10 +13,13 @@ CONFIG_LUA_ECO_WOLFSSL=y
## https://www.wolfssl.com/cpu-accelerated-cryptography-on-openwrt-using-wolfssl/
## Seems devcrypto full does not work with all my routers.
# CONFIG_PACKAGE_kmod-crypto-authenc=y
# CONFIG_PACKAGE_kmod-cryptodev=y
CONFIG_PACKAGE_kmod-cryptodev=y
CONFIG_WOLFSSL_HAS_DEVCRYPTO=y
# CONFIG_WOLFSSL_HAS_DEVCRYPTO_FULL=y
# CONFIG_WOLFSSL_HAS_AFALG is not set
# Probably it can be used by wolfssl
# Checking SSL with CPU acceleration
# MAKE SURE IT IS ARMv8 or Intel AESNI, otherwise use: CONFIG_PACKAGE_libwolfssl=y
CONFIG_PACKAGE_libwolfsslcpu-crypto=y
CONFIG_PACKAGE_kmod-crypto-user=y

4
openwrt-configure.sh
View File

@@ -43,7 +43,9 @@ if [ -n "$CRYPTO_LIB" ]; then
COMMAND="$COMMAND; apk del wpad-basic-mbedtls; apk add wpad-$CRYPTO_LIB"
if [[ "$CRYPTO_LIB" =~ ^(Wolfssl|wolfssl)$ ]]; then
FS_FULL_WPAD_PACKAGES="$FS_FULL_WPAD_PACKAGES -libustream-mbedtls libustream-wolfssl wpad-wolfssl libwolfssl"
# MAKE SURE IT IS ARMv8 or Intel AESNI, otherwise use: CONFIG_PACKAGE_libwolfssl=y
echo -e "\n\n If this is ARMv8, you can replace libwolfssl with libwolfsslcpu-crypto \n\n"
FS_FULL_WPAD_PACKAGES="$FS_FULL_WPAD_PACKAGES wpad-wolfssl libwolfssl"
elif [[ "$CRYPTO_LIB" =~ ^(Openssl|openssl)$ ]]; then
FS_FULL_WPAD_PACKAGES="$FS_FULL_WPAD_PACKAGES -libustream-mbedtls libustream-openssl wpad-openssl apk-openssl libopenssl-devcrypto"
fi