esp32 certificate

Hi,

Please could someone help me clear up how updating SSL certificates for OTA would work on the ESP32 as they are currently compiled into the firmware.

I'm using LetsEncrypt which requires certificates to be renewed every 90 days, although this question applies to all SSL certificates as they all have to be renewed at some point.

1. When the SSL certificate renewal occurs on my website will OTA over SSL on my ESP32 device fail because the baked in certificate no longer matches?

2. Is it possible to read certificates from a file on flash partition as opposed to the certs being baked into the firmware?

3. Is a keychain file that can contain multiple certificates supported?

Thanks
Wayne

 

SSL Certificate Renewal - ESP32 Forum

 

NVS Partition Generator Utility - ESP32 - — ESP-IDF Programming Guide latest documentation (espressif.com)

 调用分区工具生成BIN文件，然后下载进去就行

可以读，官方有例程