Merge pull request adafruit#10508 from dhalbert/rp2-full-cert-bundle

Update rasbperrypi and zephyr-cp to use a full Mozilla root certificate bundle

Author: tannewt

lib/certificates

@@ -655,7 +655,7 @@ CFLAGS += \
 	  -isystem $(TOP)/lib/mbedtls/include \
 	  -DMBEDTLS_CONFIG_FILE='"$(TOP)/lib/mbedtls_config/mbedtls_config.h"' \
 
-$(BUILD)/x509_crt_bundle.S: $(TOP)/lib/certificates/data/roots.pem $(TOP)/tools/gen_crt_bundle.py
+$(BUILD)/x509_crt_bundle.S: $(TOP)/lib/certificates/data/roots-full.pem $(TOP)/tools/gen_crt_bundle.py
 	$(Q)$(PYTHON) $(TOP)/tools/gen_crt_bundle.py -i $< -o $@ --asm
 OBJ_MBEDTLS := $(BUILD)/x509_crt_bundle.o
 $(patsubst %.c,$(BUILD)/%.o,$(SRC_MBEDTLS))): CFLAGS += -Wno-suggest-attribute=format

ports/raspberrypi/Makefile

@@ -34,6 +34,9 @@ CFLAGS += \
 # Must be accompanied by a linker script change
 CFLAGS += -DCIRCUITPY_FIRMWARE_SIZE='(1536 * 1024)'
 
+# The default is -O3. Change to -O2 because the build was overflowing.
+OPTIMIZATION_FLAGS = -O2
+
 # Include these Python libraries in firmware.
 FROZEN_MPY_DIRS += $(TOP)/frozen/Adafruit_CircuitPython_NeoPixel
 FROZEN_MPY_DIRS += $(TOP)/frozen/Adafruit_CircuitPython_Motor

ports/raspberrypi/boards/cytron_edu_pico_w/mpconfigboard.mk

@@ -12,3 +12,6 @@ CIRCUITPY__EVE = 1
 CIRCUITPY_FLOPPYIO = 0
 CIRCUITPY_SSL = 1
 CIRCUITPY_USB_HOST = 0
+
+# The default is -O3. Change to -O2 because the build was overflowing.
+OPTIMIZATION_FLAGS = -O2

ports/raspberrypi/boards/wiznet_w5100s_evb_pico/mpconfigboard.mk

@@ -11,3 +11,6 @@ EXTERNAL_FLASH_DEVICES = "W25Q32JVxQ"
 
 CIRCUITPY__EVE = 1
 CIRCUITPY_SSL = 1
+
+# The default is -O3. Change to -O2 because the build was overflowing.
+OPTIMIZATION_FLAGS = -O2

ports/raspberrypi/boards/wiznet_w5100s_evb_pico2/mpconfigboard.mk

@@ -12,3 +12,6 @@ CIRCUITPY__EVE = 1
 CIRCUITPY_FLOPPYIO = 0
 CIRCUITPY_SSL = 1
 CIRCUITPY_USB_HOST = 0
+
+# The default is -O3. Change to -O2 because the build was overflowing.
+OPTIMIZATION_FLAGS = -O2

ports/raspberrypi/boards/wiznet_w5500_evb_pico/mpconfigboard.mk

@@ -11,3 +11,6 @@ EXTERNAL_FLASH_DEVICES = "W25Q32JVxQ"
 
 CIRCUITPY__EVE = 1
 CIRCUITPY_SSL = 1
+
+# The default is -O3. Change to -O2 because the build was overflowing.
+OPTIMIZATION_FLAGS = -O2

ports/raspberrypi/boards/wiznet_w5500_evb_pico2/mpconfigboard.mk

@@ -530,7 +530,7 @@ async def build_circuitpython():
 
         if "ssl" in enabled_modules:
             crt_bundle = builddir / "x509_crt_bundle.S"
-            roots_pem = srcdir / "lib/certificates/data/roots.pem"
+            roots_pem = srcdir / "lib/certificates/data/roots-full.pem"
             generator = srcdir / "tools/gen_crt_bundle.py"
             tg.create_task(
                 cpbuild.run_command(