getdns icon indicating copy to clipboard operation
getdns copied to clipboard

Is there any plan to migrate to wolfssl or mbedtls?

Open daiaji opened this issue 5 years ago • 4 comments

OpenSSL may be a little too big for embedded devices.

daiaji avatar Dec 22 '19 02:12 daiaji

Not really, we do have gnutls and few other crypto library's support (libnettle, libsodium). Do you think it would be easy to include those as well? Would you like to help building support for them?

wtoorop avatar Feb 13 '20 10:02 wtoorop

I'd like to see this but cannot really contribute much more than this comment.

I've recently stopped using Stubby on an OpenWRT router because of the getdns OpenSSL dependency. OpenSSL was just too big for the resources I have.

I know the current OpenWRT wolfssl package (that I now use) is configured with --enable-opensslextra. And checking wolfssl documentation it seems they supply a compatibility header:

zxpetrel avatar Mar 03 '20 15:03 zxpetrel

When time permits I'll have a look

wtoorop avatar Mar 05 '20 09:03 wtoorop

Related issues:

https://github.com/getdnsapi/stubby/issues/311

https://github.com/openwrt/packages/issues/19481

birdie-github avatar Sep 29 '22 10:09 birdie-github