Change AT firmware SSL certificates

[pablorodiz]

First of all I want to congratulate everybody here for a great work. This is my first question, but I am using ESP8266 modules and the information here for a long time with great results.

I always use ESP8266 as slave with a more powerful CPU as main processor. The reason for this is because I need SSL for my designs, so until now I had to relay on an external processor to make the SSL part. As I recently noticed, the latest versions of AT firmwares include the possibility to use SSL in the module, freeing the external processor of this task. This would be a great inprovement over my current situation, since I could use a much less expensive external processor (or even none in some cases). The problem is about certificates.

There is no way through AT commands to provide a certificate, and I read in the forum that this not possible due to memory availability problems. That the certificate should be stored in the flash... I was searching information about this process in the documentation and through the forum but I did not find the right place. I found information on how to format the certificates and use them for a custom build firmware, but I would like to stick to the AT firmware, which works great for my use cases.

Could someone please help me understand where should I flash the certificates for the use with AT firmware so it finds them in the right place? Is this possible at all (since AT firmware is not open)?

[ESP_Faye]

Hi,

Sorry that because of the limitation of memory, AT firmware can not set SSL certificates.

Sorry for the inconvenience.

[pablorodiz]

Sorry, maybe too much text in my question so I did not make it clear.

When writing I was already clear that there is no way to change SSL certificates through AT commands.

My question is if there is a way to modify the AT firmware to include new certificates. Maybe just write them in a particular flash address... Maybe there is a way to compile the AT firmware with different certificates even it is a closed source library...

Any way?

Thanks in advance

[pablorodiz]

By the way, I guess my question is the same caccac267 is asking here: viewtopic.php?f=16&t=1726#p5698

[ESP_Faye]

Hi,

Sorry that I do not really understand your question.
SSL connection in AT command does not support cert authentication (CA), it does not have any certificate.