Skip to content

Arduino UNO: force USE_CERT_BUFFERS_256 to fit in flash #10432

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
douzzer merged 3 commits into from
May 8, 2026
Merged

Arduino UNO: force USE_CERT_BUFFERS_256 to fit in flash #10432

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
3a7cd3a
Arduino UNO: force USE_CERT_BUFFERS_256 to fit in flash
danielinux May 8, 2026
23c28c3
Address Copilot's comments: uniform mutual exclusions
danielinux May 8, 2026
347553c
Added missing known_macro
danielinux May 8, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .wolfssl_known_macro_extras
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,7 @@ ARDUINO_SAM_DUE
ARDUINO_SEEED_XIAO
ARDUINO_TEENSY40
ARDUINO_TEENSY41
ARDUINO_UNOR4_WIFI
ASN_DUMP_OID
ASN_TEMPLATE_SKIP_ISCA_CHECK
ATCAPRINTF
Expand Down
55 changes: 55 additions & 0 deletions examples/configs/user_settings_arduino.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -180,6 +180,12 @@
/* WOLFSSL_SEND_HRR_COOKIE is needed to use DTLS 1.3 server */
#define WOLFSSL_SEND_HRR_COOKIE
#endif
#elif defined(ARDUINO_UNOR4_WIFI)
/*
* UNO R4 WiFi is now just over the flash limit in the client sketch.
* Use the smaller ECC-256 built-in cert set to keep the examples fitting.
*/
#define USE_CERT_BUFFERS_256
#elif defined (__AVR__) || defined(__AVR_ARCH__) || defined(__MEGAAVR__)
/* Do not enable TLS on platforms without networking */

Expand Down Expand Up @@ -588,6 +594,9 @@
#ifdef USE_CERT_BUFFERS_1024
#error "USE_CERT_BUFFERS_1024 is already defined. Pick one."
#endif
#ifdef USE_CERT_BUFFERS_256
#error "USE_CERT_BUFFERS_256 is already defined. Pick one."
#endif
#include <wolfssl/certs_test.h>
#define CTX_CA_CERT ca_cert_der_2048
#define CTX_CA_CERT_SIZE sizeof_ca_cert_der_2048
Expand All @@ -610,6 +619,9 @@
#ifdef USE_CERT_BUFFERS_2048
#error "USE_CERT_BUFFERS_2048 is already defined. Pick one."
#endif
#ifdef USE_CERT_BUFFERS_256
#error "USE_CERT_BUFFERS_256 is already defined. Pick one."
#endif
#include <wolfssl/certs_test.h>
#define CTX_CA_CERT ca_cert_der_1024
#define CTX_CA_CERT_SIZE sizeof_ca_cert_der_1024
Expand All @@ -628,8 +640,51 @@
#define CTX_SERVER_KEY server_key_der_1024
#define CTX_SERVER_KEY_SIZE sizeof_server_key_der_1024
#define CTX_SERVER_KEY_TYPE WOLFSSL_FILETYPE_ASN1
#elif defined(USE_CERT_BUFFERS_256)
Comment thread
danielinux marked this conversation as resolved.
#ifdef USE_CERT_BUFFERS_2048
#error "USE_CERT_BUFFERS_2048 is already defined. Pick one."
#endif
#ifdef USE_CERT_BUFFERS_1024
#error "USE_CERT_BUFFERS_1024 is already defined. Pick one."
#endif
#include <wolfssl/certs_test.h>
#define CTX_CA_CERT ca_ecc_cert_der_256
#define CTX_CA_CERT_SIZE sizeof_ca_ecc_cert_der_256
#define CTX_CA_CERT_TYPE WOLFSSL_FILETYPE_ASN1

#define CTX_CLIENT_CERT cliecc_cert_der_256
#define CTX_CLIENT_CERT_SIZE sizeof_cliecc_cert_der_256
#define CTX_CLIENT_CERT_TYPE WOLFSSL_FILETYPE_ASN1
#define CTX_CLIENT_KEY ecc_clikey_der_256
#define CTX_CLIENT_KEY_SIZE sizeof_ecc_clikey_der_256
#define CTX_CLIENT_KEY_TYPE WOLFSSL_FILETYPE_ASN1

#define CTX_SERVER_CERT serv_ecc_der_256
#define CTX_SERVER_CERT_SIZE sizeof_serv_ecc_der_256
#define CTX_SERVER_CERT_TYPE WOLFSSL_FILETYPE_ASN1
#define CTX_SERVER_KEY ecc_key_der_256
#define CTX_SERVER_KEY_SIZE sizeof_ecc_key_der_256
#define CTX_SERVER_KEY_TYPE WOLFSSL_FILETYPE_ASN1
#else
#define USE_CERT_BUFFERS_256
Comment thread
danielinux marked this conversation as resolved.
#include <wolfssl/certs_test.h>
#define CTX_CA_CERT ca_ecc_cert_der_256
#define CTX_CA_CERT_SIZE sizeof_ca_ecc_cert_der_256
#define CTX_CA_CERT_TYPE WOLFSSL_FILETYPE_ASN1

#define CTX_CLIENT_CERT cliecc_cert_der_256
#define CTX_CLIENT_CERT_SIZE sizeof_cliecc_cert_der_256
#define CTX_CLIENT_CERT_TYPE WOLFSSL_FILETYPE_ASN1
#define CTX_CLIENT_KEY ecc_clikey_der_256
#define CTX_CLIENT_KEY_SIZE sizeof_ecc_clikey_der_256
#define CTX_CLIENT_KEY_TYPE WOLFSSL_FILETYPE_ASN1

#define CTX_SERVER_CERT serv_ecc_der_256
#define CTX_SERVER_CERT_SIZE sizeof_serv_ecc_der_256
#define CTX_SERVER_CERT_TYPE WOLFSSL_FILETYPE_ASN1
#define CTX_SERVER_KEY ecc_key_der_256
#define CTX_SERVER_KEY_SIZE sizeof_ecc_key_der_256
#define CTX_SERVER_KEY_TYPE WOLFSSL_FILETYPE_ASN1
#endif
#endif

Expand Down
Loading