Public bug reported:

[Impact]

 * busybox in the initramfs provides wget applet that is used by casper for 
netboot support
 * It does not support https at the moment, but it is desirable that it does
 * There is built-in TLS code, or "fork & execute openssl"
 * Enable the later one, and optionally include /usr/bin/openssl & certs, when 
building casper-like initrds which should support netboot.

[Test Case]

 * Boot casper created initrd, with break=bottom
 * Configure dhcp based networking
 * Attempt to wget https://start.ubuntu.com/connectivity-check
 * It should succeed

[Regression Potential]

 * The openssl codepath is optional in busybox wget, and we only include 
openssl & certs for casper.
 * The casper based initrd will grow in size, due to inclusion of openssl & 
certs

[Other Info]
 
 * Parity with d-i, which includes https support already

** Affects: busybox (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: busybox (Ubuntu Focal)
     Importance: Undecided
         Status: New


** Tags: rls-gg-incoming

** Also affects: busybox (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Tags added: rls-gg-incoming

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to busybox in Ubuntu.
https://bugs.launchpad.net/bugs/1879525

Title:
  Add TLS support

Status in busybox package in Ubuntu:
  New
Status in busybox source package in Focal:
  New

Bug description:
  [Impact]

   * busybox in the initramfs provides wget applet that is used by casper for 
netboot support
   * It does not support https at the moment, but it is desirable that it does
   * There is built-in TLS code, or "fork & execute openssl"
   * Enable the later one, and optionally include /usr/bin/openssl & certs, 
when building casper-like initrds which should support netboot.

  [Test Case]

   * Boot casper created initrd, with break=bottom
   * Configure dhcp based networking
   * Attempt to wget https://start.ubuntu.com/connectivity-check
   * It should succeed

  [Regression Potential]

   * The openssl codepath is optional in busybox wget, and we only include 
openssl & certs for casper.
   * The casper based initrd will grow in size, due to inclusion of openssl & 
certs

  [Other Info]
   
   * Parity with d-i, which includes https support already

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/busybox/+bug/1879525/+subscriptions

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to