Suggestion: Asio is outdated, consider upgrading & add WolfSSL support? (IDFGH-2138)

[huming2207]

Environment

• IDF version: master, a45e998

(other irrelevant stuff removed)

Problem Description

Hi there,

I've posted this issue on the forum before but no one replied. So I think I might have posted that on the wrong place. Here's the original topic: https://www.esp32.com/viewtopic.php?f=13&t=12973

Basically, nowadays Asio supports WolfSSL as the SSL library backend (ref: https://www.wolfssl.com/wolfssl-support-asio-boost-asio-c-libraries/) since earlier this year. Meanwhile, ESP-IDF also has WolfSSL included. However, the Asio library in ESP-IDF hasn't been updated for a year and it does not have SSL/TLS support.

Could you guys please upgrade this library? Thanks in advance!

Regards,
Jackson

[david-cermak]

Hi @huming2207

Thank you for this suggestion. Indeed the esp-asio hasn't been updated for a long time. Will update to the latest master soon.
As for the TLS support, this may take some time however, since ESP ASIO port is really basic with no SSL support and it's preferred to use esp-tls rather than WolfSSL directly. With latest ASIO it should still be possible to use WolfSSL setting define ASIO_USE_WOLFSSL on project level.

[huming2207]

Hi @david-cermak ,

Thanks for your reply. I agree. If esp-tls can be used as a backed of Asio on ESP-IDF, it should be better.

Meanwhile, don't forget the WolfSSL has a dual-license model. It may cause some problems with some commercial projects.

Jackson.

[schmidma]

Is there a new status regarding asio ssl support in esp-idf?

As I can see asio requests file system support from wolfSSL when using asio and wolfSSL with ASIO_USE_WOLFSSL.
E.g. asio::ssl::context::load_verify_file(...) requests usage of SSL_CTX_load_verify_locations(...) which is implemented by wolfSSL in wolfSSL_CTX_load_verify_locations(...) but disabled in the esp version with NO_FILESYSTEM.

Also when porting asio to use esp-tls there seems to be no asio-native option to disable file system related implementations.

Are there any plans to support the ssl set of asio?