Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Let's Encrypt CA is out of date #806

Closed
basak opened this issue Mar 3, 2024 · 1 comment · Fixed by #846
Closed

Let's Encrypt CA is out of date #806

basak opened this issue Mar 3, 2024 · 1 comment · Fixed by #846
Assignees
Labels
bug Something isn't working highpriority

Comments

@basak
Copy link

basak commented Mar 3, 2024

Hi,

MQTT has stopped working for me. OpenEVSE is unable to connect to my MQTT broker unless I accept self-signed certificates.

I noticed that the Let's Encrypt certificate on my broker has rotated and the certificate chain served is now shorter. This appears to be because of https://community.letsencrypt.org/t/shortening-the-lets-encrypt-chain-of-trust/201580. I believe the trusted LE CA on the firmware needs adjusting accordingly.

I found https://github.com/OpenEVSE/openevse_esp32_firmware/blob/master/src/root_ca.cpp but that doesn't look like it has changed recently.

I'm currently using:

  • 7.1.3.T2
  • 4.0.0

I'd be happy to update if I could figure out how! But AFAICT, this issue will affect the latest firmware also, unless there's some other source from the CA apart from the file above?

Thanks,

Robie

@jeremypoulter
Copy link
Collaborator

Thanks for letting us know. That is indeed the file to update with the new Root CA

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working highpriority
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants