Can cesanta confirm that builds with 1.2.16 Library on esp32 will function after you move to the new root in a week?
Not clear if Cesanta will respond, but FWIW our fleet is connecting reliably with 1.2.16 whereas older devices that are not on 1.2.16 do not.
A few points:
- 1.2.16 has a hard-coded cert that expires in 2035 as noted here
- Prior posts implied that the old root would be rolled back for a week. That’s not quite the whole story. Cesanta has already moved to the new root for most of the time, but temporarily reverts to the old root for a few hours each day (exact time is erratic). Presumably this is an intentionally short window to let old devices reconnect for the purposes of updating.
It seems quite clear that 1.2.16 works with the new and old roots whereas older builds with expired ca.pem’s will only connect with the old root.
-AD
Thanks for your response as always your full of information.