Certificate Verification failed on Lets encrypt cert

[drz2k]

[E][ssl_client.cpp:36] _handle_error(): [start_ssl_client():216]: (-9984) X509 - Certificate verification failed, e.g. CRL, CA or signature check failed [E][WiFiClientSecure.cpp:133] connect(): start_ssl_client: -9984 W: failure_number_mqtt: 11 W: failed, rc=-2 W: failed, ssl error code=-9984

We are trying to connect to a stackhero mosquitto instance via TLS. Cert is from Let's Encrypt. (https://letsencrypt.org/certs/trustid-x3-root.pem.txt). (Checking against FQDN d4i07v.stackhero-network.com)

Connection to stackhero is working fine with MQTT Explorer. But the OMG is stuck on the verification of the cert (copied completly with start and end tag). Stackhero suggest : "_espClient.setInsecure();"

[1technophile]

I'm working on a branch that enables to not use the certificate validation below: https://github.com/1technophile/OpenMQTTGateway/tree/invalid-cert

You can try it and let me know

[drz2k]

You can try it and let me know

Works like a charm so far. Would love to see the Webbased installer to add the "don't check cert" option. So maybe this turns into a feature request :)

Thanks!

[1technophile]

Thanks for the feedback. Yes, indeed, we can add something like this.

For my curiosity, do you mind sharing your use case?

[drz2k]

We will be tracking small BLE devices for the elderly to raise an alert if they wander off. (Dementia)

[github-actions[bot]]

This issue is stale because it has been open for 30 days with no activity.

[github-actions[bot]]

This issue is stale because it has been open for 90 days with no activity.

[github-actions[bot]]

This issue was closed because it has been inactive for 14 days since being marked as stale.