Did not found a real solution, but since I am using let's encrypt, I just put their root cert there and did something on the lines of:


const std::string root_cert = R"(-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgISAxo+BGDNDfRczrd96.................................
-----END CERTIFICATE ...

Hello everyone,

I am trying to get the simple esp_https_ota working with the esp_crt_bundle_attach and global_ca_store, but I am missing a step on how to add built-in crt bundle to the global CA store.
My OTA server is available over https and I am using Let's Encrypt to get valid certificates ...