arduino / nina-fw

Firmware for u-blox NINA W102 WiFi/BT module
132 stars 117 forks source link

SSL sites that can't connect #10

Open ladyada opened 5 years ago

ladyada commented 5 years ago

while trying various sites i've found a few that don't connect, not sure what the commonality is other than SSL - the root cert appears in the collection.

danlemire commented 5 years ago

Is there anyway possible to enable accepting of self-signed certificates?

facchinm commented 5 years ago

@danlemire it will be possible very soon :slightly_smiling_face:

nevercast commented 5 years ago

That website is using CloudFlare for the SSL, so it could be an issue with alternate domains, since this is how CloudFlare reuses certificates.

Or it could be the key exchange is new and unsupported by the implementation in ESP IDF

edwRoland commented 4 years ago

I have still the same problems with connecting to a specific webside. Others work but the website "www.bayrol-poolaccess.de" doesn't.

I've updated the SSL root certificates from the said website and its root certificate provider: digicert.com

Is there any way how i can debug this? Error Messages or Debug Messages to help me what I'm doing wrong?

Thank you very much for your help and time!

Arduino 1.8.10 Arduino NANO 33 IoT NINA firmware version 1.2.4 Arduino MKR WiFi 1010

bricemiramont commented 4 years ago

Hi, same here. I'd like to have my own pki as my arduino 33 ioT will be offline and I need secure communication with another device using wifi and https. I have a custom root CA, a cert (signed with my root CA) on my web server but the arduino does not get the root CA to check the web server cert when I try to load it with firmwareupdater. Will it be possible to use self-signed certificates ?

VEGA-Processor commented 9 months ago

Hi @ladyada @bricemiramont I was trying WiFiSSLClient example in WiFiNiNA library, but it is not working. (All other examples are working)

Arduino IDE: 1.8.19 Board: ARIES IoT with NiNA-W102 Firmware Version: 1.5.0 (latest)

Please help me with this. Thank You.