Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'fix/crt_bundle_unsupported_cert_extension' into 'master'

Browse Source 
fix(mbedtls):report an error for certificate files with unsupported extension

See merge request espressif/esp-idf!51518
This commit is contained in:
Mahavir Jain
2026-08-12 13:54:53 +05:30
parent 514877f57f d385023b85
commit 167b6b19bd
6 changed files with 97 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
docs/en/api-reference/protocols/esp_crt_bundle.rst
View File

@@ -30,6 +30,10 @@ Most configuration is done through menuconfig. CMake generates the bundle accord
* :menuitem:`CONFIG_MBEDTLS_DEFAULT_CERTIFICATE_BUNDLE`: decide which certificates to include from the complete root certificate list.
* :menuitem:`CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE_PATH`: specify the path of any additional certificates to embed in the bundle.
.. note::
Only PEM encoded certificates with a ``.pem`` extension and DER encoded certificates with a ``.der`` extension are parsed. The extension must match the encoding of the file, for example a PEM encoded certificate saved as ``.crt`` is not accepted. If :ref:`CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE_PATH` points directly at a file with any other extension, the build fails; if such a file is found inside a certificate directory, it is skipped and a warning is printed.
To enable the bundle when using ESP-TLS simply pass the function pointer to the bundle attach function:
.. code-block:: c