search

NickWaterton / Roomba980-Python

Python program and library to control iRobot Roomba 980 Vacuum Cleaner
MIT License
383 stars 108 forks source link

Roomba's mqtt server ssl certs set to expire December 31, 2025 #124

Open iointerrupt opened 9 months ago

iointerrupt commented 9 months ago

I have 2 Roomba e5s and an i3. While whitelisting the certificates I noticed that they are set to expire December 31, 2025:

Relevent lines from openssl cert check: v:NotBefore: Mar 13 00:00:00 2015 GMT; NotAfter: Dec 31 00:00:00 2025 GMT

If Roomba no longer provides firmware updates with newer certs, I am wondering if they will stop working with the official apps. The last update iRobot provided for the e5 was back in 2020. Not sure if it is still supported by them. I also do not use the iRobot app for any of my roombas for quiet a while - none of my roombas cannot access internet and I control them via a couple of scripts on my local lan.

This will not likely be an issue for users strictly using the scripts like roomba-python as you can easily bypass checks with SSLContext configs but wondering about the official channels.

holysoles commented 15 hours ago

FWIW when I just checked my i3+, the cert is set to expire in 2031.

I do wonder if they get OTA updates for cert updates, though given these are effectively self-signed certs I think it might be irrelevant.