From 18d0ec2fe189b544d131042b848a3461e653f0d9 Mon Sep 17 00:00:00 2001 From: Mahavir Jain Date: Thu, 6 Apr 2023 21:45:25 +0530 Subject: [PATCH] Add local cacert file containing "DST Root CA X3" to certificate bundle (#1066) ESP-IDF reference change: https://github.com/espressif/esp-idf/commit/5f646b1d43e5df2436e1c22bf4418dbf5c016485 Relevant: https://github.com/espressif/esp-idf/issues/11077 --- builder/frameworks/espidf.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/builder/frameworks/espidf.py b/builder/frameworks/espidf.py index a2fc74f..458f5f9 100644 --- a/builder/frameworks/espidf.py +++ b/builder/frameworks/espidf.py @@ -1013,8 +1013,10 @@ def generate_mbedtls_bundle(sdk_config): crt_args = ["--input"] if sdk_config.get("MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL", False): crt_args.append(os.path.join(default_crt_dir, "cacrt_all.pem")) + crt_args.append(os.path.join(default_crt_dir, "cacrt_local.pem")) elif sdk_config.get("MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_CMN", False): crt_args.append(os.path.join(default_crt_dir, "cacrt_all.pem")) + crt_args.append(os.path.join(default_crt_dir, "cacrt_local.pem")) cmd.extend( ["--filter", os.path.join(default_crt_dir, "cmn_crt_authorities.csv")] )