espressif: switch to full root certificate bundle

dhalbert · dhalbert · commit 16d5c1ca27eb · 2025-05-16T15:03:56.000-04:00
diff --git a/ports/espressif/esp-idf-config/sdkconfig.defaults b/ports/espressif/esp-idf-config/sdkconfig.defaults
@@ -96,9 +96,7 @@ CONFIG_MBEDTLS_SSL_OUT_CONTENT_LEN=2048
 #
 # Certificate Bundle
 #
-CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_NONE=y
-CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE=y
-CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE_PATH="../../lib/certificates/data/roots.pem"
+CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=y
 # end of Certificate Bundle
 
 # CONFIG_MBEDTLS_GCM_SUPPORT_NON_AES_CIPHER is not set

Original file line number	Diff line number	Diff line change
`@@ -96,9 +96,7 @@ CONFIG_MBEDTLS_SSL_OUT_CONTENT_LEN=2048`
`96`	`96`	`#`
`97`	`97`	`# Certificate Bundle`
`98`	`98`	`#`
`99`		`-CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_NONE=y`
`100`		`-CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE=y`
`101`		`-CONFIG_MBEDTLS_CUSTOM_CERTIFICATE_BUNDLE_PATH="../../lib/certificates/data/roots.pem"`
	`99`	`+CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=y`
`102`	`100`	`# end of Certificate Bundle`
`103`	`101`
`104`	`102`	`# CONFIG_MBEDTLS_GCM_SUPPORT_NON_AES_CIPHER is not set`