python-devicecloud icon indicating copy to clipboard operation
python-devicecloud copied to clipboard

Published 20 hours ago • verified publisher icon digidotcom

Expired Device Cloud certificate

Open rubenmoral opened this issue 4 years ago • 4 comments

The Device Cloud certificate attached to the project (devicecloud/data/devicecloud.crt) expired last year. Also, I have noticed that it is not included in the latest pypi distribution package (0.5.7).

rubenmoral avatar Dec 11 '20 13:12 rubenmoral

@rubenmoral being that the site's Cert will now rotate every year, it was decided to not include it.

brandonmoser avatar Dec 11 '20 15:12 brandonmoser

The certificate is needed for things like connecting a TCP monitor, the library raises an exception if it is not in the right path. What is a user supposed to do?

rubenmoral avatar Dec 11 '20 15:12 rubenmoral

We'll add instructions to download the cert chain into the README.

brandonmoser avatar Dec 11 '20 16:12 brandonmoser

FYI, there is also a main CA certificate that you can verify against that is a MUCH longer lasting certificate. But this means that your client would have to verify the certificate chain, and not just the 1yr pinned certificate.

dschleede avatar Dec 11 '20 17:12 dschleede