Integration of a CA Certificate Store Into Zephyr RTOS
summary
Proposes a flash-backed CA certificate store for Zephyr RTOS that adds three concrete APIs: store/load/delete functions which take fingerprints and buffers for certificate management. Claims reduce RAM pressure versus bundling a full CA bundle (individual certs ~2 KB, full sets easily >150 KB) and enable automatic certificate selection via mbedTLS/embedd TLS validation callbacks. Includes a PR prototype and suggests seeding with a common CA database; demonstrates actual calls, size tradeoffs, and a working delete/load fingerprint lookup.
AI-written summary · about
related talks
34mX.509 Client Authentication in Zephyr
42mCryptography Support in Zephyr: Recent Changes and Upcomings- 42mCryptography Support in Zephyr: Recent Changes and Upcomings
16mDesigning Secure Systems for CRA Compliance leveraging Zephyr
27mZephyr and Trusted Execution Environments
39mZephyr Extensions: How to Dynamically Load an Application
24mSecure and Encrypted Boot in Zephyr RTOS
39mZephyr Extensions: How to Dynamically Load an Application