{"action":"created","issue":{"url":"https://api.github.com/repos/espressif/esp-idf/issues/2406","repository_url":"https://api.github.com/repos/espressif/esp-idf","labels_url":"https://api.github.com/repos/espressif/esp-idf/issues/2406/labels{/name}","comments_url":"https://api.github.com/repos/espressif/esp-idf/issues/2406/comments","events_url":"https://api.github.com/repos/espressif/esp-idf/issues/2406/events","html_url":"https://github.com/espressif/esp-idf/issues/2406","id":359742548,"node_id":"MDU6SXNzdWUzNTk3NDI1NDg=","number":2406,"title":"[TW#26295] About component esp_https_ota problems","user":{"login":"zhaochengwei","id":13081827,"node_id":"MDQ6VXNlcjEzMDgxODI3","avatar_url":"https://avatars0.githubusercontent.com/u/13081827?v=4","gravatar_id":"","url":"https://api.github.com/users/zhaochengwei","html_url":"https://github.com/zhaochengwei","followers_url":"https://api.github.com/users/zhaochengwei/followers","following_url":"https://api.github.com/users/zhaochengwei/following{/other_user}","gists_url":"https://api.github.com/users/zhaochengwei/gists{/gist_id}","starred_url":"https://api.github.com/users/zhaochengwei/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zhaochengwei/subscriptions","organizations_url":"https://api.github.com/users/zhaochengwei/orgs","repos_url":"https://api.github.com/users/zhaochengwei/repos","events_url":"https://api.github.com/users/zhaochengwei/events{/privacy}","received_events_url":"https://api.github.com/users/zhaochengwei/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-09-13T04:56:04Z","updated_at":"2018-10-22T02:10:12Z","closed_at":null,"author_association":"NONE","body":"According to https://docs.espressif.com/projects/esp-idf/en/latest/api-reference/system/esp_https_ota.html?highlight=https,If I don't fill esp_http_client_config_t->cert_pem,the client can also communicate the https server. But in esp_https_ota.c, if i don't fill cert_pem, it will return ESP_FAIL.\r\n\r\nI coment the check ,and it solve the problems.\r\n![image](https://user-images.githubusercontent.com/13081827/45467862-52dab180-b754-11e8-9a23-2e0149984cff.png)\r\n"},"comment":{"url":"https://api.github.com/repos/espressif/esp-idf/issues/comments/431726557","html_url":"https://github.com/espressif/esp-idf/issues/2406#issuecomment-431726557","issue_url":"https://api.github.com/repos/espressif/esp-idf/issues/2406","id":431726557,"node_id":"MDEyOklzc3VlQ29tbWVudDQzMTcyNjU1Nw==","user":{"login":"zhaochengwei","id":13081827,"node_id":"MDQ6VXNlcjEzMDgxODI3","avatar_url":"https://avatars0.githubusercontent.com/u/13081827?v=4","gravatar_id":"","url":"https://api.github.com/users/zhaochengwei","html_url":"https://github.com/zhaochengwei","followers_url":"https://api.github.com/users/zhaochengwei/followers","following_url":"https://api.github.com/users/zhaochengwei/following{/other_user}","gists_url":"https://api.github.com/users/zhaochengwei/gists{/gist_id}","starred_url":"https://api.github.com/users/zhaochengwei/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zhaochengwei/subscriptions","organizations_url":"https://api.github.com/users/zhaochengwei/orgs","repos_url":"https://api.github.com/users/zhaochengwei/repos","events_url":"https://api.github.com/users/zhaochengwei/events{/privacy}","received_events_url":"https://api.github.com/users/zhaochengwei/received_events","type":"User","site_admin":false},"created_at":"2018-10-22T02:10:12Z","updated_at":"2018-10-22T02:10:12Z","author_association":"NONE","body":"> @zhaochengwei When it comes to normal HTTPS connection, server certificate verification is optional, but since firmware upgrade is a critical operation, we need to follow best security practices. So for best security practices, we have mandated HTTPS with server certificate verification, and it would be ideal if you provide root CA's certificate as server certificate.\r\n\r\nyeah,I think what you said will be better. But I meet the problems if I put my firmware on aliyun oss, It will be hard to get the ca certificate. So can you help me?"}}
{"actor":{"display_login":"zhaochengwei"}}