InfluxDB-Client-for-Arduino icon indicating copy to clipboard operation
InfluxDB-Client-for-Arduino copied to clipboard

Any way to automatically update CA cert upon expiry?

Open kARTechnology opened this issue 4 years ago • 1 comments

Proposal: I was unable to figure out why my project suddenly stopped sending updated to influxdb.

Current behavior: Requires manual library update, but library not yet updated as on 02 jan 2021, cert expired 25 dec 2020.

Desired behavior: Auto update certificate upon expiry

Alternatives considered: maybe read file from filesystem & web ui for user to upload the cert.

Use case: to prevent data loss due to connection failure, reduce downtime, user interference, develop, run and keep running.

kARTechnology avatar Jan 01 '21 20:01 kARTechnology

@kARTechnology, the most feasible solution seems to be skipping the server certificate validation at all, as I described in your previous issue.

Technically, it may be possible to write some routine that would extract a certificate. But it will definitely require an insecure connection to achieve this. And with that, it is much easier to skip certificate validation.

library not yet updated as on 02 jan 2021, cert expired 25 dec 2020.

Version 3.7.0 brought updated incorporated InfluxDB Cloud CA certificate that should ensure trust for all servers from all InfluxDB Cloud providers (AWS, Azure, GCP).

vlastahajek avatar Jan 04 '21 17:01 vlastahajek