Is cert bundle used?

[moritz89]

It does not seem that the cert bundle is used. Looking at ssl__client.cpp:start_ssl_client() the variable useRootCABundle does not seem to have an effect on the code.

I stumbled upon this as the warning was raised:

[  6024][W][ssl__client.cpp:538] auth_root_ca_buff(): WARNING: Use certificates for a more secure communication!

Could you clarify if the cert bundle is actually being used?

[github-actions]

The following fields are missing: Description, Steps to Reproduce, Expected Behavior, Actual Behavior, Environment, IDE. Please update the issue with this information.

[moritz89]

Verified that the certificates are verified even if the warning is issued when using a certificate bundle. It would make sense to disable the warning if the bundle has been set.

When compiling with -D LOGGING, -D DEBUG_ESP_PORT=Serial and -D CORE_DEBUG_LEVEL=5 the following logs are created:

[188092][W][ssl__client.cpp:538] auth_root_ca_buff(): WARNING: Use certificates for a more secure communication!
...
[172014][V][ssl__client.cpp:807] verify_server_cert(): Verifying peer X.509 certificate...
[172022][V][ssl__client.cpp:359] start_ssl_client(): Certificate verified.

As an aside, with logging enabled, the WebSocket connection itself failed.