Hi Hao,

you're right, we missed to update the build system to point to the right sha. In config.cmake I see this:

# TODO update to "mbedtls-3.6.3" after release,
set(MBEDCRYPTO_VERSION                  "f985bee" CACHE STRING "The version of Mbed Crypto to use")


can you please just try to set MBEDCRYPTO_VERSION to mbedtls-3.6.3 instead of the SHA-1 commit and try again?

Thanks,
Antonio

From: Zhang, Hao via TF-M <tf-m@lists.trustedfirmware.org>
Sent: Friday, June 06, 2025 16:13
To: Anton Komlev via TF-M <tf-m@lists.trustedfirmware.org>
Subject: [TF-M] Build failure of release/2.1.x

Dear whoever that may concern,

 

I am trying to build TF-M with release/2.1.x. The first error I see when cloning mbedcrypto is

 

Cloning into 'mbedcrypto-src'...
remote: Enumerating objects: 31188, done.
remote: Counting objects: 100% (31188/31188), done.
remote: Compressing objects: 100% (15898/15898), done.
remote: Total 31188 (delta 24658), reused 20224 (delta 15043), pack-reused 0 (from 0)
Receiving objects: 100% (31188/31188), 35.81 MiB | 4.89 MiB/s, done.
Resolving deltas: 100% (24658/24658), done.
fatal: invalid reference: f985bee
CMake Error at mbedcrypto-subbuild/mbedcrypto-populate-prefix/tmp/mbedcrypto-populate-gitclone.cmake:40 (message):
Failed to checkout tag: 'f985bee'

 

 

I therefore change the GIT_SHALLOW to FALSE, and it builds. However, another build error come up when applying patches for mbedcrypto.

 

Checking patch library/psa_crypto.c...

Checking patch library/psa_crypto_driver_wrappers.h...

error: library/psa_crypto_driver_wrappers.h: No such file or directory

Checking patch library/psa_crypto_driver_wrappers_no_static.c...

error: library/psa_crypto_driver_wrappers_no_static.c: No such file or directory

 

I did checkout commit f985bee and find in fact there is no psa_crypto_driver_wrappers.h. Is it possible that the commit hash is incorrect?

 

Best regards,

 

Hao

Hi