Hi Hao,

you're right, we missed to update the build system to point to the right sha. In config.cmake I see this:

# TODO update to "mbedtls-3.6.3" after release, set(MBEDCRYPTO_VERSION "f985bee" CACHE STRING "The version of Mbed Crypto to use")

can you please just try to set MBEDCRYPTO_VERSION to mbedtls-3.6.3 instead of the SHA-1 commit and try again?

Thanks, Antonio

________________________________ From: Zhang, Hao via TF-M tf-m@lists.trustedfirmware.org Sent: Friday, June 06, 2025 16:13 To: Anton Komlev via TF-M tf-m@lists.trustedfirmware.org Subject: [TF-M] Build failure of release/2.1.x

Dear whoever that may concern,

I am trying to build TF-M with release/2.1.x. The first error I see when cloning mbedcrypto is

Cloning into 'mbedcrypto-src'... remote: Enumerating objects: 31188, done. remote: Counting objects: 100% (31188/31188), done. remote: Compressing objects: 100% (15898/15898), done. remote: Total 31188 (delta 24658), reused 20224 (delta 15043), pack-reused 0 (from 0) Receiving objects: 100% (31188/31188), 35.81 MiB | 4.89 MiB/s, done. Resolving deltas: 100% (24658/24658), done. fatal: invalid reference: f985bee CMake Error at mbedcrypto-subbuild/mbedcrypto-populate-prefix/tmp/mbedcrypto-populate-gitclone.cmake:40 (message): Failed to checkout tag: 'f985bee'

I therefore change the GIT_SHALLOW to FALSE, and it builds. However, another build error come up when applying patches for mbedcrypto.

Checking patch library/psa_crypto.c...

Checking patch library/psa_crypto_driver_wrappers.h...

error: library/psa_crypto_driver_wrappers.h: No such file or directory

Checking patch library/psa_crypto_driver_wrappers_no_static.c...

error: library/psa_crypto_driver_wrappers_no_static.c: No such file or directory

I did checkout commit f985bee and find in fact there is no psa_crypto_driver_wrappers.h. Is it possible that the commit hash is incorrect?

Best regards,

Hao

Hi