diff --git a/vehicle/OVMS.V3/components/ovms_tls/component.mk b/vehicle/OVMS.V3/components/ovms_tls/component.mk index b4405f7e1..12b5e4faa 100644 --- a/vehicle/OVMS.V3/components/ovms_tls/component.mk +++ b/vehicle/OVMS.V3/components/ovms_tls/component.mk @@ -11,5 +11,5 @@ ifdef CONFIG_MG_ENABLE_SSL COMPONENT_SRCDIRS := src COMPONENT_ADD_INCLUDEDIRS := src COMPONENT_ADD_LDFLAGS = -Wl,--whole-archive -l$(COMPONENT_NAME) -Wl,--no-whole-archive -COMPONENT_EMBED_FILES := trustedca/usertrust.crt trustedca/digicert_global.crt trustedca/digicert_g2.crt trustedca/starfield_class2.crt trustedca/baltimore_cybertrust.crt trustedca/isrg_x1.crt +COMPONENT_EMBED_FILES := trustedca/usertrust.crt trustedca/digicert_global.crt trustedca/digicert_g2.crt trustedca/starfield_class2.crt trustedca/baltimore_cybertrust.crt trustedca/isrg_x1.crt trustedca/amazon_root_ca1.crt endif diff --git a/vehicle/OVMS.V3/components/ovms_tls/src/ovms_tls.cpp b/vehicle/OVMS.V3/components/ovms_tls/src/ovms_tls.cpp index 824039fc7..8d4c80840 100644 --- a/vehicle/OVMS.V3/components/ovms_tls/src/ovms_tls.cpp +++ b/vehicle/OVMS.V3/components/ovms_tls/src/ovms_tls.cpp @@ -168,6 +168,10 @@ void OvmsTLS::Reload() extern const unsigned char isrg_x1_end[] asm("_binary_isrg_x1_crt_end"); m_trustlist["ISRG X1 CA"] = new OvmsTrustedCert(isrg_x1, isrg_x1_end - isrg_x1); + extern const unsigned char amazon_root_ca1[] asm("_binary_amazon_root_ca1_crt_start"); + extern const unsigned char amazon_root_ca1_end[] asm("_binary_amazon_root_ca1_crt_end"); + m_trustlist["Amazon Root CA 1"] = new OvmsTrustedCert(amazon_root_ca1, amazon_root_ca1_end - amazon_root_ca1); + // Add trusted certs on disk (/store/trustedca) DIR *dir; struct dirent *dp; diff --git a/vehicle/OVMS.V3/components/ovms_tls/trustedca/amazon_root_ca1.crt b/vehicle/OVMS.V3/components/ovms_tls/trustedca/amazon_root_ca1.crt new file mode 100644 index 000000000..86b7dcd0b Binary files /dev/null and b/vehicle/OVMS.V3/components/ovms_tls/trustedca/amazon_root_ca1.crt differ