@@ -44,15 +44,16 @@ WiFiClientSecure client;
4444Adafruit_MQTT_Client mqtt (&client, AIO_SERVER, AIO_SERVERPORT, AIO_USERNAME, AIO_KEY);
4545
4646// io.adafruit.com SHA1 fingerprint
47- /* WARNING - This value was last updated on 07/14/25 and may not be up-to-date (6monthly updates) !
47+ /* WARNING - This value was last updated on 07/14/25 and may not be up-to-date!
4848* If security is a concern for your project, we strongly recommend users impacted by this move
4949* to a larger MCU like ESP32 which has certificate verification by storing root certs and having
50- * a chain-of-trust rather than doing individual certificate fingerprints.
51- * Mac/ Linux/ WSL users run the following command to get the latest fingerprint (with OpenSSL):
50+ * a chain-of-trust rather than doing individual certificate fingerprints. */
51+ / * For Mac, Linux and WSL users: Run the following command to get the latest fingerprint (with OpenSSL):
5252```
5353openssl s_client -connect [io.adafruit.com]:8883 -showcerts </dev/null 2>/dev/null | openssl x509 -fingerprint -noout | sed 's/:/ /g' | sed 's/SHA1 Fingerprint=//'
5454```
55- * Windows users can use powershell and not need to install OpenSSL:
55+ */
56+ /* Windows users can use Powershell and not need to install OpenSSL:
5657```
5758$tcpClient = New-Object System.Net.Sockets.TcpClient("io.adafruit.com", 8883);
5859$sslStream = New-Object System.Net.Security.SslStream($tcpClient.GetStream(), $false, ({$True}));
@@ -61,8 +62,9 @@ $cert = $sslStream.RemoteCertificate;
6162$fingerprint = ($cert.GetCertHashString());
6263Write-Output ($fingerprint -replace '(.{2})', '$1 ' -replace ' $', '');
6364```
64- * Replace the value below with your updated SHA1 fingerprint for io.adafruit.com:
6565*/
66+
67+ /* Replace the value below with your updated SHA1 fingerprint for io.adafruit.com: */
6668static const char *fingerprint PROGMEM = " 47 D2 CB 14 DF 38 97 59 C6 65 1A 1F 3E 00 1E 53 CC A5 17 E0" ;
6769
6870/* ***************************** Feeds ***************************************/
@@ -98,7 +100,7 @@ void setup() {
98100 Serial.println (" WiFi connected" );
99101 Serial.println (" IP address: " ); Serial.println (WiFi.localIP ());
100102
101- // check the fingerprint of io.adafruit.com's SSL cert (* see above to update)
103+ /* Verify SSL fingerprint ( see above for instructions to update the SSL fingerprint) */
102104 client.setFingerprint (fingerprint);
103105}
104106
0 commit comments