Skip to content

Conversation

@alxelax
Copy link
Contributor

@alxelax alxelax commented Nov 29, 2024

PR:

  • adds dependency of the mbedtls psa usage on secure storage
  • removes PSA ITS emulator and enables usage of
    the secure storage in ble mesh bsim tests
  • enables secure storage in all ble mesh and related samples

Copy link
Contributor

@tomi-font tomi-font left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Might also be worth a migration guide entry to indicate that it's now necessary to select the affected Kconfig options for the secure storage subsystem.

@alxelax alxelax force-pushed the remove_psa_its_emulator branch from 63bf345 to 8321d0b Compare December 3, 2024 10:51
@zephyrbot zephyrbot added the area: Samples Samples label Dec 3, 2024
@zephyrbot zephyrbot requested review from kartben and nashif December 3, 2024 10:52
@alxelax alxelax force-pushed the remove_psa_its_emulator branch from 8321d0b to 1bb8e85 Compare December 3, 2024 11:30
@zephyrbot zephyrbot added the Release Notes To be mentioned in the release notes label Dec 3, 2024
@alxelax alxelax force-pushed the remove_psa_its_emulator branch from 1bb8e85 to a1685a0 Compare December 3, 2024 11:46
@alxelax alxelax force-pushed the remove_psa_its_emulator branch from a1685a0 to e3ee4e9 Compare December 3, 2024 15:07
@zephyrbot zephyrbot added the platform: nRF Nordic nRFx label Jan 9, 2025
@alxelax alxelax dismissed tomi-font’s stale review January 9, 2025 15:03

Just gave up to adapt secure storage tests and made changes only in mesh related code with depends on SECURE_STORAGE

@alxelax alxelax removed Release Notes To be mentioned in the release notes area: Secure Storage Secure Storage labels Jan 9, 2025
@alxelax alxelax requested a review from Balaklaka January 9, 2025 15:04
@HaavardRei
Copy link
Contributor

HaavardRei commented Jan 10, 2025

The commit title says "use psa crypto storage in mesh bsim", but you change files in modules/, samples/, subsys/.../Kconfig and tests/. Maybe this can be split into three? (Modules, samples/Kconfig and bsim, or something like this)

@alxelax
Copy link
Contributor Author

alxelax commented Jan 10, 2025

The commit title says "use psa crypto storage in mesh bsim", but you change files in modules/, samples/, subsys/.../Kconfig and tests/. Maybe this can be split into three? (Modules, samples/Kconfig and bsim, or something like this)

Almost all changes are related. It is not possible to remove its emulator and start using secure storage directly without changes in modules/, subsys/ and tests/. It is possible to tract changes in samples/ as more or less independent. However, I do not see big advantages to split it as separate commit since they do not have sense without changes in subsys/.../Kconfig.

I will add more description details in commit message for better understanding.

Commit:
 - adds dependency of the mbedtls psa usage on secure storage
 - removes PSA ITS emulator and enables usage of
   the secure storage in ble mesh bsim tests
 - enables secure storage in all ble mesh and related samples

Signed-off-by: Aleksandr Khromykh <[email protected]>
@alxelax alxelax force-pushed the remove_psa_its_emulator branch from 88ff6d3 to 29a3bf5 Compare January 10, 2025 12:55
@alxelax alxelax changed the title tests: Bluetooth: Mesh: use psa secure storage in mesh bsim tests Bluetooth: Mesh: use secure storage in ble mesh Jan 10, 2025
@alxelax alxelax requested a review from PavelVPV January 14, 2025 09:47
Copy link
Contributor

@tomi-font tomi-font left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! I just found this point not very clear in your commit message:

- adds dependency of the mbedtls psa usage on secure storage

I think I get what you mean after having reviewed the changes, but it could be made clearer IMO. Also, maybe worth having something in the migration guide or release notes?

@kartben kartben merged commit 967b096 into zephyrproject-rtos:main Jan 14, 2025
29 checks passed
@alxelax alxelax deleted the remove_psa_its_emulator branch January 14, 2025 12:30
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 17, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 17, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 17, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 17, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 17, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 17, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 17, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 21, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 21, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 22, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
JordanYates added a commit to Embeint/zephyr that referenced this pull request Feb 22, 2025
Re-add the option to use the MbedTLS ITS backend on posix. This backend
is much simpler to setup than the Zephyr backends in a testing
environment. This was previously removed in:
  zephyrproject-rtos#82319

Signed-off-by: Jordan Yates <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

10 participants