Using SSL with an IP address instead of DNS...

[hdrut]

Hi,

been working on SSL with Android these last weeks and found an issue that may be worth mentioning here in case somebody else has the same problem.

The problem with the client certificate created by the Espressif's makefile is it uses an IP address as CN (common name), which is not recommended. During SSL verification process, this IP address is not accepted and verification fails.
The right way to do it, also the way I solved the issue, is by adding a SAN (Subject Alternative Name) field to the certificate config file.
The following link may help understand how to do it.

https://bowerstudios.com/node/1007