Skip to content

TLS(ca trust): Add Amazon Root CA 1 certificate to TLS component #1381

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
dexterbg merged 1 commit into from
May 9, 2026
Merged

TLS(ca trust): Add Amazon Root CA 1 certificate to TLS component #1381

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion vehicle/OVMS.V3/components/ovms_tls/component.mk
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,5 +11,5 @@ ifdef CONFIG_MG_ENABLE_SSL
COMPONENT_SRCDIRS := src
COMPONENT_ADD_INCLUDEDIRS := src
COMPONENT_ADD_LDFLAGS = -Wl,--whole-archive -l$(COMPONENT_NAME) -Wl,--no-whole-archive
COMPONENT_EMBED_FILES := trustedca/usertrust.crt trustedca/digicert_global.crt trustedca/digicert_g2.crt trustedca/starfield_class2.crt trustedca/baltimore_cybertrust.crt trustedca/isrg_x1.crt
COMPONENT_EMBED_FILES := trustedca/usertrust.crt trustedca/digicert_global.crt trustedca/digicert_g2.crt trustedca/starfield_class2.crt trustedca/baltimore_cybertrust.crt trustedca/isrg_x1.crt trustedca/amazon_root_ca1.crt
endif
4 changes: 4 additions & 0 deletions vehicle/OVMS.V3/components/ovms_tls/src/ovms_tls.cpp
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -168,6 +168,10 @@ void OvmsTLS::Reload()
extern const unsigned char isrg_x1_end[] asm("_binary_isrg_x1_crt_end");
m_trustlist["ISRG X1 CA"] = new OvmsTrustedCert(isrg_x1, isrg_x1_end - isrg_x1);

extern const unsigned char amazon_root_ca1[] asm("_binary_amazon_root_ca1_crt_start");
extern const unsigned char amazon_root_ca1_end[] asm("_binary_amazon_root_ca1_crt_end");
m_trustlist["Amazon Root CA 1"] = new OvmsTrustedCert(amazon_root_ca1, amazon_root_ca1_end - amazon_root_ca1);

// Add trusted certs on disk (/store/trustedca)
DIR *dir;
struct dirent *dp;
Expand Down
Binary file added vehicle/OVMS.V3/components/ovms_tls/trustedca/amazon_root_ca1.crt
View file
Open in desktop
Binary file not shown.