Skip to content

manifest: sdk-zephyr: Update certificates for RSA-3072 support with NRF security #23282

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

NordicBuilder
Copy link
Contributor

Automatically created by action-manifest-pr GH action from PR: nrfconnect/sdk-zephyr#3045

@NordicBuilder NordicBuilder requested review from a team as code owners July 14, 2025 07:27
@github-actions github-actions bot added manifest changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. labels Jul 14, 2025
@NordicBuilder
Copy link
Contributor Author

NordicBuilder commented Jul 14, 2025

The following west manifest projects have changed revision in this Pull Request:

Name Old Revision New Revision Diff
zephyr nrfconnect/sdk-zephyr@237ef2e (main) nrfconnect/sdk-zephyr#3045 nrfconnect/sdk-zephyr#3045/files

DNM label due to: 1 project with PR revision

Note: This message is automatically posted and updated by the Manifest GitHub Action.

@NordicBuilder
Copy link
Contributor Author

NordicBuilder commented Jul 14, 2025

CI Information

To view the history of this post, clich the 'edited' button above
Build number: 18

Inputs:

Sources:

sdk-nrf: PR head: aa70867a9ff8136f27df1769bd8e7bab9d3a8b1e
hostap: PR head: e942f86e865d5b24bbbe8b0c333f030cbbe62bfb
zephyr: PR head: dd8fac426ff52eb3997bd86076a28140b13728f1

more details

sdk-nrf:

PR head: aa70867a9ff8136f27df1769bd8e7bab9d3a8b1e
merge base: 9b873599c9425e0a55ab80bbfea38cb1d5905e9f
target head (main): 9b873599c9425e0a55ab80bbfea38cb1d5905e9f
Diff

hostap:

PR head: e942f86e865d5b24bbbe8b0c333f030cbbe62bfb
merge base: 8412f4b23b6267ee6035d25515a23aaf243f6ad7
Diff

zephyr:

PR head: dd8fac426ff52eb3997bd86076a28140b13728f1
merge base: 231cc2964814da82c866ec9c61d8e59097d43591
target head (main): 237ef2e9225a5130047a24f368650c279b676f0b
Diff

Github labels

Enabled Name Description
ci-disabled Disable the ci execution
ci-all-test Run all of ci, no test spec filtering will be done
ci-force-downstream Force execution of downstream even if twister fails
ci-run-twister Force run twister
ci-run-zephyr-twister Force run zephyr twister
List of changed files detected by CI (63)
modules
│  ├── lib
│  │  ├── hostap
│  │  │  ├── hostapd
│  │  │  │  ├── ctrl_iface_zephyr.c
│  │  │  │  ├── ctrl_iface_zephyr.h
│  │  │  │  │ hostapd_cli_zephyr.c
│  │  │  ├── src
│  │  │  │  ├── ap
│  │  │  │  │  │ hostapd.h
│  │  │  │  ├── common
│  │  │  │  │  ├── wpa_ctrl.c
│  │  │  │  │  │ wpa_ctrl.h
│  │  │  │  ├── crypto
│  │  │  │  │  │ crypto_mbedtls_alt.c
│  │  │  ├── wpa_supplicant
│  │  │  │  ├── ctrl_iface_zephyr.c
│  │  │  │  ├── ctrl_iface_zephyr.h
│  │  │  │  │ wpa_cli_zephyr.c
│  ├── trusted-firmware-m
│  │  │ Kconfig.tfm.pm
samples
│  ├── wifi
│  │  ├── shell
│  │  │  │ Kconfig
subsys
│  ├── nrf_security
│  │  │ Kconfig.legacy
west.yml
zephyr
│  ├── Kconfig.zephyr
│  ├── drivers
│  │  ├── wifi
│  │  │  ├── nrf_wifi
│  │  │  │  ├── Kconfig.nrfwifi
│  │  │  │  ├── inc
│  │  │  │  │  │ fmac_main.h
│  │  │  │  ├── src
│  │  │  │  │  ├── fmac_main.c
│  │  │  │  │  ├── net_if.c
│  │  │  │  │  ├── wifi_mgmt.c
│  │  │  │  │  │ wifi_util.c
│  ├── dts
│  │  ├── bindings
│  │  │  ├── wifi
│  │  │  │  │ nordic,wlan.yaml
│  ├── include
│  │  ├── zephyr
│  │  │  ├── net
│  │  │  │  ├── net_core.h
│  │  │  │  │ net_l2.h
│  ├── kernel
│  │  │ Kconfig
│  ├── lib
│  │  ├── os
│  │  │  ├── zvfs
│  │  │  │  │ Kconfig
│  ├── modules
│  │  ├── hostap
│  │  │  ├── Kconfig
│  │  │  ├── src
│  │  │  │  ├── hapd_events.c
│  │  │  │  ├── supp_api.c
│  │  │  │  ├── supp_events.c
│  │  │  │  │ supp_main.c
│  │  ├── nrf_wifi
│  │  │  ├── bus
│  │  │  │  ├── qspi_if.c
│  │  │  │  ├── rpu_hw_if.c
│  │  │  │  │ spi_if.c
│  │  │  ├── os
│  │  │  │  │ shim.c
│  ├── samples
│  │  ├── net
│  │  │  ├── wifi
│  │  │  │  ├── test_certs
│  │  │  │  │  ├── rsa2k_no_des
│  │  │  │  │  │  ├── ca.pem
│  │  │  │  │  │  ├── ca2.pem
│  │  │  │  │  │  ├── client-key.pem
│  │  │  │  │  │  ├── client-key2.pem
│  │  │  │  │  │  ├── client.pem
│  │  │  │  │  │  ├── client2.pem
│  │  │  │  │  │  ├── server-key.pem
│  │  │  │  │  │  │ server.pem
│  │  │  │  │  ├── rsa3k
│  │  │  │  │  │  ├── ca.pem
│  │  │  │  │  │  ├── ca2.pem
│  │  │  │  │  │  ├── client-key.pem
│  │  │  │  │  │  ├── client-key2.pem
│  │  │  │  │  │  ├── client.pem
│  │  │  │  │  │  ├── client2.pem
│  │  │  │  │  │  ├── server-key.pem
│  │  │  │  │  │  │ server.pem
│  ├── scripts
│  │  ├── kconfig
│  │  │  │ kconfig.py
│  ├── share
│  │  ├── sysbuild
│  │  │  │ Kconfig
│  ├── snippets
│  │  ├── wifi-credentials
│  │  │  ├── README.rst
│  │  │  ├── snippet.yml
│  │  │  │ wifi-credentials.conf
│  │  ├── wifi-enterprise
│  │  │  ├── snippet.yml
│  │  │  ├── wifi-enterprise-nrf-ns.conf
│  │  │  ├── wifi-enterprise-nrf.conf
│  │  │  │ wifi-enterprise.conf
│  ├── subsys
│  │  ├── net
│  │  │  ├── ip
│  │  │  │  │ net_if.c
│  │  │  ├── lib
│  │  │  │  ├── sockets
│  │  │  │  │  │ Kconfig
│  │ west.yml

Outputs:

Toolchain

Version: 684b32e022
Build docker image: docker-dtr.nordicsemi.no/sw-production/ncs-build:684b32e022_bba2ea5f2e

Test Spec & Results: ✅ Success; ❌ Failure; 🟠 Queued; 🟡 Progress; ◻️ Skipped; ⚠️ Quarantine

  • ◻️ Toolchain - Skipped: existing toolchain is used
  • ✅ Build twister
    • sdk-nrf test count: 30
    • sdk-zephyr test count: 2692
  • ❌ Integration tests
    • ✅ test_ble_nrf_config
    • ✅ test-fw-nrfconnect-chip
    • ❌ test-fw-nrfconnect-nfc
    • ✅ test-fw-nrfconnect-nrf-iot_cloud
    • ✅ test-fw-nrfconnect-nrf-iot_zephyr_lwm2m
    • ✅ test-fw-nrfconnect-nrf-iot_samples
    • ✅ test-fw-nrfconnect-nrf_crypto
    • ✅ test-fw-nrfconnect-rs
    • ✅ test-fw-nrfconnect-fem
    • ✅ test-fw-nrfconnect-tfm
    • ✅ test-fw-nrfconnect-thread-main
    • ✅ test-sdk-find-my
    • ✅ test-fw-nrfconnect-nrf_lrcs_mosh
    • ✅ test-fw-nrfconnect-nrf_lrcs_positioning
    • ✅ test-sdk-wifi
    • ✅ test-low-level
    • ✅ test-sdk-mcuboot
    • ⚠️ test-fw-nrfconnect-nrf-iot_thingy91
    • ⚠️ test-fw-nrfconnect-nrf_lrcs_mosh
    • ⚠️ test-fw-nrfconnect-nrf_lrcs_positioning
    • ⚠️ test-sdk-dfu
Disabled integration tests
    • desktop52_verification
    • doc-internal
    • test-fw-nrfconnect-apps
    • test-fw-nrfconnect-ble_mesh
    • test-fw-nrfconnect-ble_samples
    • test-fw-nrfconnect-nrf-iot_libmodem-nrf
    • test-fw-nrfconnect-nrf-iot_lwm2m
    • test-fw-nrfconnect-nrf-iot_serial_lte_modem
    • test-fw-nrfconnect-ps-main
    • test-fw-nrfconnect-rpc
    • test-sdk-audio
    • test-sdk-pmic-samples
    • test-secdom-samples-public

Note: This message is automatically posted and updated by the CI

@rado17 rado17 requested a review from a team as a code owner July 14, 2025 07:50
Copy link

You can find the documentation preview for this PR here.

@NordicBuilder NordicBuilder force-pushed the auto-manifest-sdk-zephyr-3045 branch 9 times, most recently from 5915de0 to bb2ccb5 Compare July 17, 2025 04:45
@rado17 rado17 force-pushed the auto-manifest-sdk-zephyr-3045 branch from bb2ccb5 to 6b907fa Compare July 17, 2025 06:32
@NordicBuilder NordicBuilder force-pushed the auto-manifest-sdk-zephyr-3045 branch 4 times, most recently from a2b78a8 to 8f14b74 Compare July 17, 2025 07:09
NordicBuilder and others added 4 commits July 18, 2025 04:19
Automatically created by Github Action

Signed-off-by: Nordic Builder <pylon@nordicsemi.no>
Max MPI size is set to 256 by default. This needs to be increased
to 384 to handle RSA-3072 signature.

Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
Increase size of Protected Storage partition to accommodate
the certificates required for W-Fi enterprise security.

Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
For build with TFM and support for protected storage enabled,
additional RAM needs to be freed to accommodate the additional
features.

Signed-off-by: Ravi Dondaputi <ravi.dondaputi@nordicsemi.no>
@NordicBuilder NordicBuilder force-pushed the auto-manifest-sdk-zephyr-3045 branch from 8f14b74 to aa70867 Compare July 18, 2025 04:19
@krish2718
Copy link
Contributor

Will open a manual manifest update PR for convinience.

@krish2718 krish2718 closed this Jul 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
changelog-entry-required Update changelog before merge. Remove label if entry is not needed or already added. DNM manifest manifest-zephyr
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants