Add Badge.Team OTA service certificate

Author: renzenicolai

CMakeLists.txt

@@ -12,4 +12,5 @@ idf_component_register(
 		"certificates/mch2022_ota.pem"
 		"certificates/tanmatsu_apps.pem"
 		"certificates/tanmatsu_ota.pem"
+		"certificates/badgeteam_ota.pem"
 )

Kconfig

@@ -5,6 +5,9 @@ menu "Custom certificates"
 	config CUSTOM_CA_LETSENCRYPT_X2
 		bool "Letsencrypt ISRG ROOT X2"
 		default y
+	config CUSTOM_CA_BADGETEAM_OTA
+		bool "Self-signed: Badge.Team OTA update cloud service"
+		default n
 	config CUSTOM_CA_MCH2022_OTA
 		bool "Self-signed: Badge.Team MCH2022 OTA update cloud service"
 		default n

certificates/badgeteam_ota.pem

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

custom_certificates.c

@@ -30,6 +30,11 @@ extern const uint8_t _binary_tanmatsu_ota_pem_start[];
 extern const uint8_t _binary_tanmatsu_ota_pem_end[];
 #endif
 
+#ifdef CONFIG_CUSTOM_CA_BADGETEAM_OTA
+extern const uint8_t _binary_badgeteam_ota_pem_start[];
+extern const uint8_t _binary_badgeteam_ota_pem_end[];
+#endif
+
 // Note: there is no need to call esp_tls_init_global_ca_store as this function is called implicitly by
 // esp_tls_set_global_ca_store if it has not already been called
 
@@ -70,5 +75,11 @@ esp_err_t initialize_custom_ca_store(void) {
     if (res != ESP_OK) return res;
 #endif
 
+#ifdef CONFIG_CUSTOM_CA_BADGETEAM_OTA
+    ESP_LOGI(TAG, "Adding Badge.Team OTA certificate to CA store");
+    res = add_certificate(_binary_badgeteam_ota_pem_start, _binary_badgeteam_ota_pem_end);
+    if (res != ESP_OK) return res;
+#endif
+
     return res;
 }