Configuration Conflicts with OSDP and NRF Security

RE: Configuration Conflicts with OSDP and NRF Security

rwoodward-lb — Wed, 13 Dec 2023 14:51:15 GMT

That solved the problem. Im no longer getting any build errors.
Thank you, so much!

RE: Configuration Conflicts with OSDP and NRF Security

Vidar Berg — Wed, 13 Dec 2023 10:54:39 GMT

Hi,

The initial reason I couldn't reproduce the error was that I had disabled CONFIG_OSDP_SC_ENABLED to allow me to build the original sample without considering what this option actually did (i.e., enabling encryption support).

To fix these compile errors I had to cherry pick the commits from this PR: https://github.com/zephyrproject-rtos/zephyr/pull/66258

/ncs/v2.5.0/zephyr$ git remote add arkwad https://github.com/arkwad/zephyr.git
/ncs/v2.5.0/zephyr$ git remote fetch arkwad
/ncs/v2.5.0/zephyr$ git cherry-pick a30723d52fe4bb3afd605af5b204bbbcfad759b5
/ncs/v2.5.0/zephyr$ git cherry-pick 5fd916aa8f855c8d03652f7d8ed7bbd773b42d12

After applying this fix, I was able to reproduce the same build error because CONFIG_OSDP_SC_ENABLED is selecting the Zephyr mbedtls module here: https://github.com/nrfconnect/sdk-zephyr/blob/b3979ec709df026fc655286f1a58be30b0f688e0/subsys/mgmt/osdp/Kconfig#L71

Please try to comment the lines shown below in /v2.5.0/zephyr/subsys/mgmt/osdp/Kconfig and see if it fixes the problem:

config OSDP_SC_ENABLED
	bool "OSDP Secure Channel"
	depends on CSPRING_ENABLED
	default y
	#select CRYPTO
	#select CRYPTO_MBEDTLS_SHIM
	#select MBEDTLS
	#select MBEDTLS_CIPHER_CCM_ENABLED
	help
	  Secure the OSDP communication channel with encryption and mutual
	  authentication.

RE: Configuration Conflicts with OSDP and NRF Security

rwoodward-lb — Tue, 12 Dec 2023 17:12:39 GMT

I downloaded the 2.5.0 SDK this morning and attempted the, peripheral_device sample, build again. Unfortunately, there was no change.

I tried to add these statements to the prj.config:

CONFIG_NRF_SECURITY=y
CONFIG_PSA_WANT_ALG_CCM=y

Here is an image of the prj.config file:

I initially was using 2.4.99-dev2, I switched over to 2.5.0 this morning. Im getting the same results.

Here is an image of the build attempt on 2.5.0

RE: Configuration Conflicts with OSDP and NRF Security

Vidar Berg — Tue, 12 Dec 2023 12:39:02 GMT

Hello,

Which version of the nRF Connect SDK are you using? I tried to reproduce this by building the /zephyr/samples/subsys/mgmt/osdp/peripheral_device sample with CONFIG_NRF_SECURITY enabled in SDK v.2.5.0, but did not get any build errors. Please try to add CONFIG_PSA_WANT_ALG_CCM=y to your build and see if you receive the same linker errors.

Best regards,

Vidar