how to rotate SSL certificates

[littlegreenbean33]

Hi,

I was wondering what the the right way to rotate/renew certificates in mycropython. I have not seen an ACME like library or anything similar.

This is in a controlled, isolated industrial environment with local CA. We use MQTTS for communications but cybersec does not allow to exchange the certificate via MQQT topics.

Any ideas ?

Thanks.

JCG

[vshymanskyy]

In general, this is simple if you have an OTA mechanism. Certificates are updated just like any other file.
Here are some insights on how we've implemented an OTA mechanism for our Blynk products.

[littlegreenbean33]

I do not have OTA. Cybersec currently forbids anything like that in the shopfloor. I will be looking to see if there ia an ACME client for micropython

[vshymanskyy]

The thing is, updating even a single file, like a certificate on the device via a network, os by definition a OTA update.

If that's not allowed, you should use self signed certificates of other approaches to security.

There's nothing insecure in OTA updates that are implemented properly (and his is not easy).