ESP32 OTA via HTTPS 

Thank you so much for posting this! I am glad to finally find someone who explained well, and thanks again for the code!

Thankyou very much. Greetings from New Zealand. Loved your explanation. You made what seemed to me to be very complex- to be actually not so complex. And thankyou for sharing the code as well. Thanks to you I am OTA-ing! I have incorporated it as a component that I can shove into any wifi enabled project. Thanks again for taking time to share.

Wonderful tutorial. Well done Luca & thanks a lot for sharing all your projects. Now I have some reading for my Xmass vacations.

Clear and well explained, thank you!

Grazie per il video. Molto utile come, d'altronde, il resto delle sue pubblicazioni

Wonderful tutorial, Luca! I am very surprised to see an RTOS-IDE example, while the whole internet is intoxicated by the tons of Arduino examples.

brilliant tutorials

Complimenti, ottimo video, molto utile!!

Grande! molto chiaro ed utile

Thabks for this!

Hi Luca, Thank you for your great tutorials...... Since we are configuring the partition as an "OTA", how we can use OTA with the custom partition of the SPIFFS? Another question, if the website is an HTTP (not HTTPS) is the library still works?

Hello! Thank you so much for sharing all this information. I am stuck in 1:43 can you explain how to set up the server. You have a .bin file link in the CPanel and In the code you are using a .json file. Can you please explain the steps in between these.

You’re my Hero.

I love you! 😁 Thankssssssssssssss!

You are a Gem... 👍👍👍

Incredible.

Hello Luca , how do you used step by step debugging for esp32

I followed esp32 simple ota example.openssl gives .rnd file not found

Great example! Any chance we can do OTA using Dropbox? i.e. we put new bin and json file in a Dropbox folder and make the ESP32 get it from there?

Buenas Luca! Thank you for your video. It is really helpfully. Could you explain a bit more certificate generation part? Which is this process for netsons hosting that are you using at the example? Great job! thanks in advance.

Thank you

Hello Luca. Have you ever tried out to do OTA updates with ssl + mutual authentication ?

Bellissimo video potresti rifarlo in italiano magari anche l’altro in seguito quello che spiega come downgreadare ad una versione vecchia sei un grande subito inscritto

Thanks from bangladesh.

Good day Luca, How can we begin the OTA process in Http without having/passing any certificates?

I am trying esp idf simple ota example. But i am getting error OTA image invalid magic byte How to solve this ?

Thank for your tutorial. I wish to put the binary file on my repository at github.com. How can I get certs.pem file ? Can I use your file ?

Too good ...........

Thanks for your video. Grazie mille. How can I make file .bin? With the IDE Arduino? Best regards

Wow! Great Video. Can I not export a bin file from Arduino IDE and do this procedure?

Hi. thank you for tutorial. Unofrtunately I have been using Arduino IDE for compiling sketches for ESP32. I made litlle modification to be able to compile, but even uploading succesfully (after defining the const * char server_cert) the code is unable to show it is executing. Can you make a tutorial to show steps and method you use for compiling this code , and uploading please?

It looks very nice, Do you think it would run over ESP8266?

Hi. what about we reset mcu? it last firmware from memory or get new firmware on every boot?

Beautifully Done ! Bravo ! Do I have permission to use this code in my projects ?

Luca, it possible to do on platformio?

I think I found a security risk. The code only checks for authentication (using the certificate) while calling the "esp_https_ota" function. But the code does not check for authentication while downloading the JSON file. That is enough for a man-in-the-middle-attack, right? For example, an attacker could use DNS spoofing to redirect you to his own JSON file, pointing you to the address of his own malicious binary file. As long as his binary file is hosted on a legit domain with the SAME ROOT CERTIFICATE as the legit binary file's domain, the second authentication check will not detect the deception.

Thank you sir. But json file is getting downloaded, the rcv_buffer is empty always. Any solution please.Thank you sir.

hello there... In original ESP-IDF OTA examples, there is only connection to .bin file on webserver (or some net location). That mean, board will download it each time in "loop"? How it know, that bin file changed or not? Or I am not understand it correctly? You have made .json file where you put version 0.2, 0.1 etc.. and if it is difference, it will download bin file and run it.. github.com/espressif/esp-idf/tree/master/examples/system/ota Edit: 2 hours later...... Oh yes... I understand it now. But i cannot compile your code, because it is old with Makefile and make command isnt working on my ESP-IDF 3.3. I dont know how to install it correctly to support toolchain and other dependencies...

I am getting the error "downloaded file is not a valid json". Also if the rcv_buffer is empty at start of the code, it will always return NULL. Isn't it?

Can i do this with GSM Module?

Can I use aws as web hosting service ? what do you suggest?

How to update via bluetooth on ESP32?

Thanks for a great tutorial. Can you recommend alternatives to netsons.co.?

what to code in ESP ?

any way to upload Spiffs via OTA??

How to solve certificate issue?

excellent explanation. Thanks for the upload