ESP32 Forum

The examples show how to add PEM certificate to the flash (howsmyssl_com_root_cert.pem)

All working fine to connect through HTTPS to our server. But a certificate has an expiration date.
So after September I imagine the communication will suddenly stop, and we will not be able to do OTA to fix it.

Are my assumptions correct? how can I make esp download latest PEM when it expires?

EDIT: there is a ENABLE_MBEDTLS_CERTIFICATE_EXPIRACY_CHECK option in menuconfig disabled by default.
Does this mean it will not break and I don't have to worry?

gunar.kroeger wrote: ↑

Fri May 31, 2019 2:21 pm

EDIT: there is a ENABLE_MBEDTLS_CERTIFICATE_EXPIRACY_CHECK option in menuconfig disabled by default.
Does this mean it will not break and I don't have to worry?

found this post that seems to confirm it:
viewtopic.php?t=7585

It just isn't clear to me if we have to do anything special in the server to keep the certificate forever or something

We generated a certificate that will expire in 7 days so we can test it