Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Optimize bloated ca-bundle into service specific bundles #4

Open
tripflex opened this issue Aug 29, 2019 · 2 comments
Open

Optimize bloated ca-bundle into service specific bundles #4

tripflex opened this issue Aug 29, 2019 · 2 comments

Comments

@tripflex
Copy link

Related to #3 and mongoose-os-libs/gcp#6 (comment)

The full ca-bundle has grown over time, ultimately resulting in a bloated library that is included even when certain certificates are not needed. And as MOS continues to grow, this will become more and more of an issue.

As mentioned by @rojer mongoose-os-libs/gcp#6 (comment)

ultimately, i think, the bundle should be unbundled and we should have each library add its own ca file and mos (mbedtls, really) to be able to check them all. e.g., set ca_cert="*ca.pem", so it will match gcp.ca.pe, aws.ca.pem and make adding your own ca files easy - just call it something.ca.pem and it will match. but it requires change to mbedtls, somewhat non-trivial.
so, for now i think we'll just have to add another cert to the bundle.

@fabiohmantelli
Copy link

This has been an issue for me. In my case, when I add the aws library to my mos.yml file, on build process I don't have enough space in my fs, and the 31 kb ca.pem file seems to be the problem. I get the following error, while trying to write another file to the fs, after I have added the ca.pem file:

SPIFFS_write failed: -10001 *** Out of space, tried to write 2836 bytes ***

@fabiohmantelli
Copy link

Same problem over here. Hope this gets worked out

This has been an issue for me. In my case, when I add the aws library to my mos.yml file, on build process I don't have enough space in my fs, and the 31 kb ca.pem file seems to be the problem. I get the following error, while trying to write another file to the fs, after I have added the ca.pem file:

SPIFFS_write failed: -10001 *** Out of space, tried to write 2836 bytes ***

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants