Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update mbedtls library version to 3.5.1 #123

Merged
merged 9 commits into from
Jan 15, 2024
Merged

Conversation

codypiersall
Copy link
Owner

Keep crypto dependencies up to date.

Cody Piersall added 9 commits January 3, 2024 21:14
Tests are passing locally. Additionally, we no longer skip the tls
tests. Let's see how CI likes it.
v3.5.1 is failing to build wheels due to libraries getting installed to
lib64 instead of lib on cibuildwheel.
Seems like the root cause is that when mbedtls moved to use
GnuInstallDirs, the install directory for the library changed. Which
makes sense. I couldn't figure out how to get mbedtls to install do lib,
so I just check if lib64 exists, and if so move to lib.

Doesn't feel good, but there it is.
moving the lib64 to lib unconditionally causes the build to fail when
the 2nd wheel is getting built, because then the destination directory
exists. We also moved to copying instead of moving, because that will
prevent the mbedtls lib from doing extra work when it finds out that its
targets are missing.
Hopefully this works in CI, or at least works a little better.
mbedtls fails to build on 32-bit Linux without passing some compiler
options. We pass them through an environment variable, which is not the
best way to do it, but here we are.

Hopefully this will be able to be removed whenever mbedtls pushes a new
release; seems that this has been fixed upstream in merge
Mbed-TLS/mbedtls#8406.
@codypiersall codypiersall merged commit 41b6ae8 into master Jan 15, 2024
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant