verification_t struct
Broker identity verification If fields are not set broker's identity isn't verified. it's recommended to set the options in this struct for security reasons.
Fields
Use a global ca_store, look esp-tls documentation for details.
Pointer to ESP x509 Certificate Bundle attach function for the usage of certificate bundles. Client only attach the bundle, the clean up must be done by the user.
Certificate data, default is NULL. It's not copied nor freed by the client, user needs to clean up.
Length of the buffer pointed to by certificate.
Pointer to PSK struct defined in esp_tls.h to enable PSK authentication (as alternative to certificate verification). PSK is enabled only if there are no other ways to verify broker. It's not copied nor freed by the client, user needs to clean up.
Skip any validation of server certificate CN field, this reduces the security of TLS and makes the *MQTT* client susceptible to MITM attacks.
NULL-terminated list of supported application protocols to be used for ALPN.
Pointer to the string containing server certificate common name. If non-NULL, server certificate CN must match this name, If NULL, server certificate CN must match hostname. This is ignored if skip_cert_common_name_check=true. It's not copied nor freed by the client, user needs to clean up.
![]()
struct verification_t {