net: lwip: extend wget to support CA (root) certificates
authorJerome Forissier <jerome.forissier@linaro.org>
Wed, 5 Mar 2025 14:26:42 +0000 (15:26 +0100)
committerJerome Forissier <jerome.forissier@linaro.org>
Tue, 11 Mar 2025 13:16:03 +0000 (14:16 +0100)
commit2df965d385872b2ae49a79c2cab4679a8999467f
tree98e155e93f866b6376f1474e232085b7937e7d1f
parent64ce9bfc6d53423d4f6d382837a33c3dffb152af
net: lwip: extend wget to support CA (root) certificates

Add the "cacert" (Certification Authority certificates) subcommand to
wget to pass root certificates to the code handling the HTTPS protocol.
The subcommand is enabled by the WGET_CACERT Kconfig symbol.

Usage example:

 => dhcp
 # Download some root certificates (note: not authenticated!)
 => wget https://cacerts.digicert.com/DigiCertTLSECCP384RootG5.crt
 # Provide root certificates
 => wget cacert $fileaddr $filesize
 # Enforce verification (it is optional by default)
 => wget cacert required
 # Forget the root certificates
 => wget cacert 0 0
 # Disable verification
 => wget cacert none

Signed-off-by: Jerome Forissier <jerome.forissier@linaro.org>
Reviewed-by: Ilias Apalodimas <ilias.apalodimas@linaro.org>
cmd/Kconfig
cmd/net-lwip.c
net/lwip/wget.c