ghost0815
DEB König
- Registriert
- 17. Juni 2012
- Beiträge
- 6.021
- Lösungen
- 11
- Reaktionspunkte
- 8.707
- Punkte
- 3.030
Sie müssen registriert sein, um Links zu sehen.
, I've spent the last two weeks trying to migrate all SSL and CRYPTO components of the current oscam master to MbedTLS.The result is a fully functional oscam variant based on MbedTLS 3.6.5 LTS, which can be reviewed and tested in the
Sie müssen registriert sein, um Links zu sehen.
.What has been changed?
-
Sie müssen registriert sein, um Links zu sehen.library code resides as a git submodule in the source tree of oscam repository (externally maintaind, automatically managed via make/cmake)
- used library functions of MbedTLS are statically build into oscam binary
- cscrypt functions replaced with MbedTLS ones (except RC6 IDEA)
- embedding crypto functions (AES MD5 MDC2 DES SHA1 SHA256 RC6 IDEA BIGNUM) depends on selected oscam modules (config.sh)
- USE_SSL flag is still present and needed for https webif, signing
- USE_LIBCRYPTO flag was removed
- no OpenSSL dependency anymore, it is not need in toolchains during build nor on the target system
- MbedTLS integration is done without binding on glibc, so the built binary is widely compatible, only architecture matters
- for the make/cmake guys
-
Code:
# clone mbedtls branch git clone https://git.streamboard.tv/common/oscam.git -b mbedtls oscam-mbedtls cd oscam-mbedtls # your normal make/cmake commands - for the simplebuild3 guys
-
Code:
# optional, if you want to start from scratch git clone https://github.com/gorgone/s3_releases.git s3_releases cd s3_releases ./s3 update_me ./s3 checkout mbedtls # your normal s3 commands
- -- alpha version, could have bugs, not for "production" use
- ++ We will find it out...
- later
Du musst angemeldet sein, um Bilder zu sehen.
Quelle:hxxps://board.streamboard.tv/forum/thread/48609-mbedtls-oscam-openssl-completely-removed/
thx @WXbet