8000
Skip to content

TLS enabled ECDSA by default for ESP8266 #24009

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
s-hadinger merged 1 commit into from
Oct 13, 2025
Merged

TLS enabled ECDSA by default for ESP8266 #24009

s-hadinger merged 1 commit into from
Oct 13, 2025

Conversation

@s-hadinger
Copy link
Collaborator
@s-hadinger s-hadinger commented Oct 13, 2025

Description:

TLS ECDSA:

  • enable ECDSA by default on ESP8266 (+11.5k code for TLS enabled firmwares), can be disabled by removing #define USE_MQTT_TLS_ECDSA
  • added AWS IoT Amazon Root CA3 which is used to sign ECDSA certificates. As an EC CA, it is much smaller than RSA CA.

Checklist:

  • The pull request is done against the latest development branch
  • Only relevant files were touched
  • Only one feature/fix was added per PR and the code change compiles without warnings
  • The code change is tested and works with Tasmota core ESP8266 V.2.7.8
  • The code change is tested and works with Tasmota core ESP32 V.3.1.4
  • I accept the CLA.

NOTE: The code change must pass CI tests. Your PR cannot be merged unless tests pass

@s-hadinger s-hadinger merged commit b045579 into arendst:development Oct 13, 2025
64 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@s-hadinger
0