36 Commits

Author SHA1 Message Date
s-hadinger
e8baea464f
TLS increase timeout and fix crash (#23249) 2025-04-05 00:04:36 +02:00
Giuliano Zaro
b1f3d6268d
Allow acl in mqtt when client certificate is in use (#22998)
* Allow acl in mqtt

Acl in mqtt needs user name if 'use_identity_as_username' is not true. It also seems that login in mqtt don't accept an user with an empty password, then reenabled both

* Add new define for mosquitto

Keep compatibility with AWS_IOT

* Better approach to custom client certificate

Don't duplicate defined check. Let USE_MQTT_AWS_IOT automatically set USE_MQTT_CLIENT_CERT and use latter in all code

* with mosquitto user and password may be empty

When mosquitto 'use_identity_as_username' option is enabled password and user are not used
2025-02-20 22:51:52 +01:00
s-hadinger
97b375fd57
TLS fix ecdsa fingerprint 2024-12-16 22:31:01 +01:00
s-hadinger
69d3fc1003
TLS disable ECDSA for MQTT to ensure we don't break fingerprints after #22649 (#22656) 2024-12-15 19:43:51 +01:00
s-hadinger
615c6763f6
Tls ecdsa (#22649)
* TLS add support for ECDSA on ESP32

* Reduce size for ESP8266
2024-12-14 22:39:45 +01:00
Ryan Castellucci
8d1b4094db
clean up remnents of old fingerprint algo (#22645) 2024-12-14 15:35:14 +01:00
Jason2866
099c68678a
prepare WPA Enterprise compile (#22497)
* prep for WPA eap
2024-11-17 13:15:36 +01:00
Jason2866
09c43fa729
fix compile when no core_version exists (#22494) 2024-11-15 20:44:16 +01:00
s-hadinger
5c30d92627
BearSSL panic on ESP8266 in rare conditions (#22017) 2024-08-25 23:10:48 +02:00
s-hadinger
ec6448b353
Drop support of old insecure fingerprint algorithm (deprecated since v8.4.0) (#21416) 2024-05-15 22:30:10 +02:00
s-hadinger
2128dfbade
Refactored Wifi for ESP32 to allow for Core3 (#21106)
* Refactored Wifi for ESP32 to allow for Core3

* Fix case in include

* Grrr

* Fix compilation

* Fix Ethernet IPv6

* Fix wrong hostname due to mac address unknown at start
2024-04-05 23:44:21 +02:00
Pabasara Perera
c0ae3dcaca
Fix tls handshaking issue (#20721)
* Fix tls handshaking issue

* fixed time comparison issue

* removed multiplication from loop
2024-02-15 10:40:04 +01:00
s-hadinger
4100682297
Fix TLS by removing redundant BearSSL code from libmail (#19472) 2023-09-06 20:12:59 +02:00
s-hadinger
c2f8821b2f
Sendmail upgraded to ESP-Mail-Client v3.4.9 from v1.2.0, using BearSSL instead of MbedTLS (#19460)
* `Sendmail` upgraded to ESP-Mail-Client v3.4.9 from v1.2.0, using BearSSL instead of MbedTLS

* Fix compilation on ESP8266

* Fix compilation

* fix compilation
2023-09-04 23:00:37 +02:00
s-hadinger
bc7ef89b3c
ESP8266 Fix TLS SNI which would prevent AWS IoT connection (#17936) 2023-02-12 21:33:13 +01:00
s-hadinger
ce0a0d05a9
MQTT now uses Tasmota's DNS resolver instead of LWIP (#17387) 2022-12-13 21:46:20 +01:00
Stephan Hadinger
539c508918 Increase PWM channels to 16 (Esp32 only) 2022-01-27 21:30:05 +01:00
gemu2015
1339d5e792 revert 2022-01-21 11:57:52 +01:00
gemu2015
f3be1445e4 esp8266 email, scripter on 1m devices 2022-01-21 08:03:12 +01:00
gemu2015
f3b5201c67 fix esp8266 email 2022-01-14 10:00:32 +01:00
Stephan Hadinger
0589a28ec8 Change more platform definitions 2021-12-20 21:05:00 +01:00
Stephan Hadinger
b409377068 MQTT TLS dual mode (CA or fingeprint) in same firmware, `SetOption132 1` to force fingerprint 2021-12-01 21:38:28 +01:00
Stephan Hadinger
23e562a058 TLS make ALPN configurable 2021-11-10 18:45:50 +01:00
Theo Arends
2e87681612 BearSSL: support connect() without timeout on ESP32
BearSSL: support connect() without timeout on ESP32 (#13435)
2021-10-23 18:08:49 +02:00
Stephan Hadinger
03a3dd481e Missed one 2021-10-23 17:50:12 +02:00
Stephan Hadinger
1aa017a095 Roll back from #13435 2021-10-23 17:46:52 +02:00
Lech Perczak
b5730a9be9 BearSSL: support connect() without timeout on ESP32
Arduino-ESP32 supports both versions of 'connect' method, with and
without timeout argument. Since most users of
WiFiClientSecure_light class use version without this argument -
for example - Telegram, export both on ESP32 to fix build failure
with USE_TELEGRAM enabled on ESP32.

Fixes: 3d5c68b8505a ("Berry class ``webclient`` for HTTP/HTTPS requests")
Signed-off-by: Lech Perczak <lech.perczak@gmail.com>
2021-10-21 23:29:47 +02:00
Stephan Hadinger
1a96a39d3a TLS dual mode 2021-10-09 09:49:00 +02:00
Stephan Hadinger
9731b3ea53 Moved HttpClient to its own lib 2021-09-03 08:53:42 +02:00
Jason2866
b1d4435e67 Capitilization 2021-09-02 21:32:12 +00:00
Stephan Hadinger
3d5c68b850 Berry class `webclient` for HTTP/HTTPS requests 2021-09-02 21:58:08 +02:00
Stephan Hadinger
c21f6d455d Fix ESP32 TLS reconnects 2021-09-01 19:42:57 +02:00
Stephan Hadinger
6834e5f72a Fix StackThunk size for USE_MQTT_AWS_IOT_LIGHT 2021-07-18 21:45:39 +02:00
Stephan Hadinger
49b1c06f10 Increase min stack thunk to 3800 #12031 2021-05-09 18:18:39 +02:00
ksaye
21deb1f42b
Modifying to support Azure as well as AWS for TLS
This addresses the issue https://github.com/arendst/Tasmota/issues/12031
2021-05-08 09:40:00 -05:00
Stephan Hadinger
63c7e5f7bf Introduced tasmota_options.h for libs 2021-05-04 19:28:51 +02:00