What's the best way to perform OTA Updates?

[ashleyvanlaer]

I'm developing an iot project, to bring the product to market. I need to make OTA updates available. What's the best approach for this? I have found an OTA Library. But it doesn't explain how to manage it in a safe way from an external update server.

[ESP_Angus]

ESP-IDF comes with OTA support and there are some OTA examples included:
https://github.com/espressif/esp-idf/tr ... system/ota

ESP-JUMPSTART also includes some steps for OTA:
https://docs.espressif.com/projects/esp ... index.html

Regarding server-side configuration, a plain HTTP or HTTPS (recommended) server is all you need to distribute updates. However you may want to authenticate your devices so that unauthorized devices can't download updates. The best way to do this is in conjunction with whatever server-side application logic you have (for example, have the server-side application push a one-time-only HTTPS download URL to the device). The next best way is to use some kind of HTTPS authentication (password or TLS client authentication) on the device, or generate a custom device-specific URL and parse this on the server somehow.