I see that the ussl library does not verify SSL certificates. I need encryption but I don't strictly need SSL. What are my alternatives?
My device does HTTP (or could do MQTT?) GETs or POSTs to a server to receive orders and send status updates. I need to be able to allow or deny access to my service using a password and I want to avoid attackers sending spurious commands. My device is a chicken coop door opener with phone notifications. Is there another way to provide authentication and authorization?
Since uPython on the ESP doesn't verify SSL certificates
-
- Posts: 83
- Joined: Mon Mar 20, 2017 10:22 pm
-
- Posts: 83
- Joined: Mon Mar 20, 2017 10:22 pm
Re: Since uPython on the ESP doesn't verify SSL certificates
Is SSL verified on the ESP32 port? I can't find documentation.
-
- Posts: 83
- Joined: Mon Mar 20, 2017 10:22 pm
Re: Since uPython on the ESP doesn't verify SSL certificates
So without this uPython on the 8266 is a toy. I'm moving toward WiPy or Pi Zero W instead.
Re: Since uPython on the ESP doesn't verify SSL certificates
[quote="BetterAutomations"]So without this uPython on the 8266 is a toy. I'm moving toward WiPy or Pi Zero W instead.[/quote]
Hear, hear. For all the hoopla about the ESP8266-based boards, this is serious and valid complaint.
Hear, hear. For all the hoopla about the ESP8266-based boards, this is serious and valid complaint.
Re: Since uPython on the ESP doesn't verify SSL certificates
That's valid, but not the only way to deal with it, another alternative:BetterAutomations wrote:So without this uPython on the 8266 is a toy. I'm moving toward WiPy or Pi Zero W instead.
- Open a shop to resell WiPy or Pi Zero W. When you sell few tens of thousands of them, for the funds collected, hire someone to implement the support you need.
- Get to sleep an hour later for few weeks or months and implement this support yourself.
Awesome MicroPython list
Pycopy - A better MicroPython https://github.com/pfalcon/micropython
MicroPython standard library for all ports and forks - https://github.com/pfalcon/micropython-lib
More up to date docs - http://pycopy.readthedocs.io/
Pycopy - A better MicroPython https://github.com/pfalcon/micropython
MicroPython standard library for all ports and forks - https://github.com/pfalcon/micropython-lib
More up to date docs - http://pycopy.readthedocs.io/
- pythoncoder
- Posts: 5956
- Joined: Fri Jul 18, 2014 8:01 am
- Location: UK
- Contact:
Re: Since uPython on the ESP doesn't verify SSL certificates
Hear, hear!pfalcon wrote:...
- Get to sleep an hour later for few weeks or months and implement this support yourself.
Peter Hinch
Index to my micropython libraries.
Index to my micropython libraries.
-
- Posts: 83
- Joined: Mon Mar 20, 2017 10:22 pm
Re: Since uPython on the ESP doesn't verify SSL certificates
I'm sorry guys I'm rushed to get the product done. For my project going to a Pi has several other benefits so I'm doing that instead.
For others who do still want to use the ESP and uPython, a suggestion: Wrap the C code (which does verify) in Python, extend it somehow. I thought I recalled reading about a way to wrap the native code into a module but I don't recall any more details at the moment.
Hoping this is viewed as a constructive suggestion; that's the way it is intended.
For others who do still want to use the ESP and uPython, a suggestion: Wrap the C code (which does verify) in Python, extend it somehow. I thought I recalled reading about a way to wrap the native code into a module but I don't recall any more details at the moment.
Hoping this is viewed as a constructive suggestion; that's the way it is intended.