Node / meshtastic / Meshtastic-Android / files / core / network / src / commonMain / kotlin / org / meshtastic / core / network / repository / MqttTlsTrust.kt

Displaying Raw • Download

T8b949e/*

* Copyright (c) 2026 Meshtastic LLC

*

* This program is free software: you can redistribute it and/or modify

* it under the terms of the GNU General Public License as published by

* the Free Software Foundation, either version 3 of the License, or

* (at your option) any later version.

*

* This program is distributed in the hope that it will be useful,

* but WITHOUT ANY WARRANTY; without even the implied warranty of

* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

* GNU General Public License for more details.

*

* You should have received a copy of the GNU General Public License

* along with this program. If not, see <https://www.gnu.org/licenses/>.

*/

Tff7b72package T7ee787org.meshtastic.core.network.repository

Tff7b72import T7ee787io.ktor.network.tls.TLSConfigBuilder

T8b949e/**

* TLS customisation applied to the MQTT transports, or `null` to keep the platform default trust decision.

*

* Self-hosted brokers are commonly fronted by a private or self-signed CA that the user installs into the device

* credential store. Android used to grant that trust app-wide via `<certificates src="user"/>` in `base-config` of

* `network_security_config.xml`, which widened every TLS connection the app makes — map tiles, API calls, everything.

* mqtt-client 0.6.0/0.7.0 added a per-transport hook (`TcpTransportFactory`/`WebSocketTransportFactory`), so the grant

* now applies to the MQTT socket alone.

*

* Supplying a trust manager *replaces* the platform trust decision for these connections: network-security-config

* anchors, pinning, and Certificate Transparency policy no longer apply to them. That is a deliberately narrower blast

* radius than the app-wide anchor it replaces.

*/

Tff7b72expect Tff7b72fun Td2a8ffmqttTlsConfigTb4b4b4(Tb4b4b4)Tb4b4b4: Tb4b4b4(Te6edf3TLSConfigBuilderTb4b4b4.Tb4b4b4(Tb4b4b4) Tff7b72-Tff7b72> Tffa657UnitTb4b4b4)Tff7b72?