aboutsummaryrefslogtreecommitdiff
path: root/tools/build/options/WITH_BEARSSL
diff options
context:
space:
mode:
Diffstat (limited to 'tools/build/options/WITH_BEARSSL')
-rw-r--r--tools/build/options/WITH_BEARSSL20
1 files changed, 19 insertions, 1 deletions
diff --git a/tools/build/options/WITH_BEARSSL b/tools/build/options/WITH_BEARSSL
index f576ea25dce4..ff443a20586a 100644
--- a/tools/build/options/WITH_BEARSSL
+++ b/tools/build/options/WITH_BEARSSL
@@ -1,4 +1,3 @@
-.\" $FreeBSD$
Build the BearSSL library.
.Pp
BearSSL is a tiny SSL library suitable for embedded environments.
@@ -9,3 +8,22 @@ This library is currently only used to perform
signature verification and related operations
for Verified Exec and
.Xr loader 8 .
+.Pp
+Due to size constraints in the BIOS environment on x86, one may need to set
+.Va LOADERSIZE
+larger than the
+default 500000, although often loader is under the 500k limit even with
+this option.
+Setting
+.Va LOADERSIZE
+larger than 500000 may cause
+.Xr pxeboot 8
+to be too large to work.
+Careful testing of the loader in the target environment when built with a larger
+limit to establish safe limits is critical because different BIOS environments
+reserve differing amounts of the low 640k space, making a precise limit for
+everybody impossible.
+.Pp
+See also
+.Va WITH_LOADER_PXEBOOT
+for other considerations.