Topic: how to build wolfssl with TLS1.3 support in Xilinx ZCU102

What is the correct way to build wolfssl for Xilinx ZCU102

- Is it possible to build with "./configure"
0r do we need to use XSDK IDE.

I need to build with TLS 1.3 support. Could you please share the steps...

Share

Re: how to build wolfssl with TLS1.3 support in Xilinx ZCU102

Hi Iyaps,

You can do either ./configure with cross compile or a Vitis IDE project.

We have a full example project here:
https://github.com/dgarske/UltraZed-EG-wolf

For cross-compiling here is an example I used for QNX on the ZCU102:


./configure --host=aarch64 \
    CC="aarch64-unknown-nto-qnx7.0.0-gcc" \
    AR="aarch64-unknown-nto-qnx7.0.0-ar" \
    RANLIB="aarch64-unknown-nto-qnx7.0.0-ranlib" \
    --prefix=$WOLFSSL_BUILD_DIR \
    --disable-shared --disable-examples --disable-crypttests \
    CFLAGS="-DWOLFSSL_HAVE_MIN -DWOLFSSL_HAVE_MAX \
    -DFP_MAX_BITS=8192" --enable-fastmath \
    --enable-armasm --enable-sp --enable-sp-asm

With some minor adjustments to the compile CC you could build with a generic GCC like "aarch64-none-elf-". You might also need to add CFLAGS= "-march=armv8-a"

Thanks,
David Garske, woilfSSL

Share

Re: how to build wolfssl with TLS1.3 support in Xilinx ZCU102

Hi Iyaps,

For TLS v1.3 it is on by default, but you can explicitly set `--enable-tls13` to turn it on.

TLS v1.3 requires the following additional build options (if not using ./configure):

#define WOLFSSL_TLS13
#define HAVE_FFDHE_2048
#define HAVE_HKDF
#define WC_RSA_PSS

Thanks,
David Garske, wolfSSL

Share