3 ms·

I did some playing around with ESP8266 and found dealing with HTTPS to be a pain when certificates changed. Have things improved?

• eitherway 4y ago
  Encryption in General on the ESP32 is difficult. I haven't used it, but there now seems to be some good support in the ESP-IDF Framework: https://docs.espressif.com/projects/esp-idf/en/latest/esp32/api-reference/protocols/esp_tls.html?highlight=tls#overview https://docs.espressif.com/projects/esp-idf/en/latest/esp32/...
• realharo 4y ago
  If you're just making HTTPS requests to your own servers, you can simply include the root certificate of the CA you're using, pass it to the config when calling `esp_http_client_init` (https://docs.espressif.com/projects/esp-idf/en/latest/esp32c3/api-reference/protocols/esp_http_client.html#_CPPv4N24esp_http_client_config_t8cert_pemE https://docs.espressif.com/projects/esp-idf/en/latest/esp32c...) and then you probably don't have to worry about it for a long time, it will work through your regular certificate rotation. See https://docs.espressif.com/projects/esp-idf/en/latest/esp32c3/api-reference/protocols/esp_http_client.html#https-request https://docs.espressif.com/projects/esp-idf/en/latest/esp32c... If you need to make requests to other people's servers, there is a tool to generate and include a bundle from Mozilla, that you can update in the future as part of an OTA update (https://docs.espressif.com/projects/esp-idf/en/latest/esp32c3/api-reference/protocols/esp_crt_bundle.html#updating-the-certificate-bundle https://docs.espressif.com/projects/esp-idf/en/latest/esp32c...).