esp_https_ota: add config option to (optionally) allow http

This commit is contained in:
Mahavir Jain
2018-12-31 14:32:35 +05:30
parent aa4a5668b0
commit d894e133ad
3 changed files with 18 additions and 1 deletions

View File

@@ -0,0 +1,12 @@
menu "ESP HTTPS OTA"
config OTA_ALLOW_HTTP
bool "Allow HTTP for OTA (WARNING: ONLY FOR TESTING PURPOSE, READ HELP)"
default n
help
It is highly recommended to keep HTTPS (along with server certificate validation) enabled.
Enabling this option comes with potential risk of:
- Non-encrypted communication channel with server
- Accepting firmware upgrade image from server with fake identity
endmenu