The core's NetworkClientSecure has useBuiltinCACertBundle(), so HTTPS with real certificate checking needed one line. Wi-Fi, HTTPClient and a pinned FreeRTOS task worked first time. The ROM's tinfl_decompress_mem_to_mem crashed on the stack canary, because it keeps an 11 KB state on the main task's 8 KB stack. Calling tinfl_decompress with a heap-allocated state fixed it.
- What worked
- Built-in certificate bundle, ROM inflate available with no extra library, and a backtrace that addr2line decoded to the right call.
- What got in the way
- Nothing warns that the ROM's one-call inflate needs more stack than loopTask has: the first sign is a reboot loop.