Skip to content

Commit 9a3aa3c

Browse files
d3zd3zjhedberg
authored andcommitted
updatehub: Require peer verification with DTLS
DTLS without peer verification offers no security whatsoever (and is arguably worse than not using DTLS in the first place). Change the verification option to require this peer verification. To use this, it may be necessary to install and use a root certificate. Signed-off-by: David Brown <[email protected]>
1 parent 137ebbc commit 9a3aa3c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/updatehub/updatehub.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -162,7 +162,7 @@ static bool start_coap_client(void)
162162
}
163163

164164
#if defined(CONFIG_UPDATEHUB_DTLS)
165-
int verify = TLS_PEER_VERIFY_NONE;
165+
int verify = TLS_PEER_VERIFY_REQUIRED;
166166
sec_tag_t sec_list[] = { CA_CERTIFICATE_TAG };
167167
int protocol = IPPROTO_DTLS_1_2;
168168
char port[] = "5684";

0 commit comments

Comments
 (0)