This commit is contained in:
J. Nick Koston
2026-01-27 10:23:25 -10:00
parent 856f54667c
commit 4598205c88
2 changed files with 2 additions and 1 deletions

View File

@@ -701,7 +701,7 @@ def require_full_certificate_bundle() -> None:
"""Request the full certificate bundle instead of the common-CAs-only bundle.
By default, ESPHome uses CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_CMN which
includes only CAs with >1% market share (~35 KB smaller than full bundle).
includes only CAs with >1% market share (~51 KB smaller than full bundle).
This covers ~99% of websites including Let's Encrypt, DigiCert, Google, Amazon.
Call this from components that need to connect to services using uncommon CAs.

View File

@@ -7,6 +7,7 @@ esp32:
enable_lwip_mdns_queries: true
enable_lwip_bridge_interface: true
disable_libc_locks_in_iram: false # Test explicit opt-out of RAM optimization
use_full_certificate_bundle: false # Test CMN bundle (default)
wifi:
ssid: MySSID