Repository files navigation

• Important Note from v1.9.2
• Why do we need this EthernetWebServer_SSL library
  • Features
  • Currently supported Boards
  • Currently supported Ethernet shields/modules
• Changelog
• Prerequisites
• Installation
  • Use Arduino Library Manager
  • Manual Install
  • VS Code & PlatformIO
• Packages' Patches
  • 1. For Adafruit nRF52840 and nRF52832 boards
  • 2. For Teensy boards
  • 3. For Arduino SAM DUE boards
  • 4. For Arduino SAMD boards
    • For core version v1.8.10+
    • For core version v1.8.9-
  • 5. For Adafruit SAMD boards
  • 6. For Seeeduino SAMD boards
  • 7. For STM32 boards
    • 7.1. For STM32 boards to use LAN8720
    • 7.2. For STM32 boards to use Serial1
  • 8. For RP2040-based boards using Earle Philhower arduino-pico core
    • 8.1. To use BOARD_NAME
    • 8.2. To avoid compile error relating to microsecondsToClockCycles
  • 9. For Portenta_H7 boards using Arduino IDE in Linux
  • 10. For RTL8720DN boards using AmebaD core
  • 11. For SAMD21 and SAMD51 boards using ArduinoCore-fab-sam core
  • 12. For Seeeduino RP2040 boards
  • 13. For Seeeduino nRF52840 boards
• Libraries' Patches
  • 1. For application requiring 2K+ HTML page
  • 2. For Ethernet library
  • 3. For EthernetLarge library
  • 4. For Etherne2 library
  • 5. For Ethernet3 library
  • 6. For UIPEthernet library
  • 7. For fixing ESP32 compile error
  • 8. For fixing ESP8266 compile error
• HOWTO Use analogRead() with ESP32 running WiFi and/or BlueTooth (BT/BLE)
  • 1. ESP32 has 2 ADCs, named ADC1 and ADC2
  • 2. ESP32 ADCs functions
  • 3. ESP32 WiFi uses ADC2 for WiFi functions
• Configuration Notes
  • 1. How to select which built-in Ethernet or shield to use
  • Important
  • 2. How to select another CS/SS pin to use
  • 3. How to use W5x00 with ESP8266
  • 4. How to increase W5x00 TX/RX buffer
  • 5. How to adjust sendContent_P() and send_P() buffer size
  • 6. How to use SPI2 for ESP32 using W5x00 and Ethernet_Generic Library
  • 7. How to use SPI1 for RP2040 using W5x00 and Ethernet_Generic Library
  • 8. How to use SPI1/SPI2 for Teensy 4.x using W5x00 and Ethernet_Generic Library
• WebServer and non TLS/SSL WebClient Usage
  • Init the CS/SS pin if use EthernetWrapper
  • Class Constructor
  • Basic Operation
  • Advanced Options
  • Other Function Calls
• TLS/SSL WebClient Usage
  • Overview
    • 1. Board and Network Peripheral Requirements
    • 2. How to use Trust Anchors TA
    • 3. Note
• How It Works
• Other Features
  • Logging
  • Errors
  • Write Buffering
  • Session Caching
  • mTLS
• Implementation Notes
  • Seeding Random Data
  • Certificate Verification
  • Resources
  • Read Buffer Overflow
  • Cipher Support
  • Known Issues
• Examples
  • WebServer, TLS/SSL Client Examples
    • 1. AdvancedWebServer
    • 2. HelloServer
    • 3. HelloServer2
    • 4. HttpBasicAuth
    • 5. MQTTClient_Auth
    • 6. MQTTClient_Basic
    • 7. MQTTClient_SSL
    • 8. MQTTClient_SSL_Auth
    • 9. MQTTClient_SSL_Complex
    • 10. PostServer
    • 11. SimpleAuthentication
    • 12. UdpNTPClient
    • 13. UdpSendReceive
    • 14. WebClient
    • 15. WebClientMulti_SSL
    • 16. WebClientRepeating
    • 17. WebClient_SSL
    • 18. WebServer
    • 19.MQTTS_ThingStream.
    • 20.MQTT_ThingStream.
    • 21.AdvancedWebServer_NativeEthernet
    • 22.WebClientMulti_SSL_NativeEthernet
    • 23.AWS_IoTNew
    • 24. multiFileProjectNew
  • HTTP and WebSocket Client New Examples
    • 1. BasicAuthGet
    • 2. CustomHeader
    • 3. DweetGet
    • 4. DweetPost
    • 5. HueBlink
    • 6. node_test_server
    • 7. PostWithHeaders
    • 8. SimpleDelete
    • 9. SimpleGet
    • 10. SimpleHTTPExample
    • 11. SimplePost
    • 12. SimplePut
    • 13. SimpleWebSocket
  • New Examples for Teensy 4.1 QNEthernet
    • 1.AdvancedWebServer_QNEthernet
    • 2.MQTTClient_SSL
    • 3.MQTTClient_SSL_Auth
    • 4.MQTTClient_SSL_Complex
    • 5.MQTTS_ThingStream
    • 6. WebClientMulti_SSL
    • 7. WebClient_SSL
  • New Examples for SPI1/SPI2
    • 1.AdvancedWebServer_RP2040_SPI1New
    • 2.AdvancedWebServer_Teensy4x_SPI1New
• Example AdvancedWebServer
  • 1. File AdvancedWebServer.ino
  • 2. File defines.h
• Debug Terminal Output Samples
  • 1. AdvancedWebServer on NRF52840_FEATHER_EXPRESS with ENC28J60 using EthernetENC Library
  • 2. ENC28J60_WM_Config on ESP32 with ENC28J60 using UIPEthernet Library
  • 3. WebClientMulti_SSL on SAM DUE with W5x00 using Ethernet_Generic Library
  • 4. WebClient_SSL on SEEED_XIAO_M0 with W5x00 using Ethernet_Generic Library
  • 5. MQTTClient_SSL_Complex on SAM DUE with W5x00 using Ethernet_Generic Library
  • 6. MQTTS_ThingStream on SEEED_XIAO_M0 with W5x00 using Ethernet_Generic Library
  • 7. MQTTS_ThingStream on MBED RASPBERRY_PI_PICO with W5x00 using Ethernet_Generic Library
  • 8. MQTTClient_SSL on MBED RASPBERRY_PI_PICO with W5x00 using Ethernet_Generic Library
  • 9. AdvancedWebServer on MBED RASPBERRY_PI_PICO with W5x00 using Ethernet_Generic Library
  • 10. MQTTClient_SSL on RASPBERRY_PI_PICO with W5x00 using Ethernet_Generic Library
  • 11. AdvancedWebServer on RASPBERRY_PI_PICO with W5x00 using Ethernet_Generic Library
  • 12. AdvancedWebServer_QNEthernet on Teensy 4.1 using QNEthernet Library
  • 13. MQTTClient_SSL on Teensy 4.1 using QNEthernet Library
  • 14. WebClientMulti_SSL on Teensy 4.1 using QNEthernet Library
  • 15. AdvancedWebServer on PORTENTA_H7_M7 using Portenta_Ethernet Library
  • 16. AdvancedWebServer on RASPBERRY_PI_PICO with W5x00 using Ethernet_Generic Library on SPI1
  • 17. AdvancedWebServer_RP2040_SPI1 on MBED RASPBERRY_PI_PICO with W5x00 using Ethernet_Generic Library on SPI1
  • 18. AdvancedWebServer_Teensy4x_SPI1 on TEENSY 4.1 with W5x00 using Ethernet_Generic Library on SPI1
  • 19. MQTTClient_SSL on SAMD_ZERO with W5x00 using Ethernet_Generic Library
• Debug
• Troubleshooting
• Issues
• TO DO
• DONE
• Contributions and Thanks
• Contributing
• License
• Copyright

To be safe for systems using oldW5100 shields, theexamples are usingoptional conservative values for SPI clock speed of 14MHz andSPI_MODE0

ForSAMD21 M0, such asSAMD Zero, SPI clock speed of 8MHz andSPI_MODE0 are used.

// Default to use W5100. Must change to false for W5500, W5100S, for faster SPI clock// Must use true for SAMD21, such as Zero, SAMD_FEATHER_M0_EXPRESS, etc.#defineUSE_W5100true

To use with shields different fromW5100, such asW5200, W5500, W5100S, change to

// Default to use W5100. Must change to false for W5500, W5100S, for faster SPI clock#defineUSE_W5100false

For Arduino SAMD21 Zero, in order to print to Terminal, useSERIAL_PORT_USBVIRTUAL ==SerialUSB

// Use this for ARDUINO_SAMD_ZERO, etc. if can't print to terminal with Serial.print#if defined(SERIAL_PORT_USBVIRTUAL)  #defineSerial          SERIAL_PORT_USBVIRTUAL  #warning Using SAMD Zero SerialUSB#endif

ThisEthernetWebServer_SSL library is a simple yet complete TLS/SSL WebClient and non-TLS/SSL WebServer library forTeensy, SAM DUE, Arduino SAMD21, Adafruit SAMD21/SAMD51, Adafruit nRF52, ESP32/ESP8266, STM32, etc. boards using Ethernet shields. The functions are similar and compatible to those ofESP32 WebServer andESP8266WebServer libraries to make life much easier to port sketches from ESP8266/ESP32.

TheRP2040-based boards, such as RASPBERRY_PI_PICO, are currently supported usingArduino-mbed RP2040 core orEarle Philhower's arduino-pico core v1.3.1+.

ThisEthernetWebServer_SSL library addsTLS 1.2 functionality to EthernetClient, using BearSSL as an underlying TLS engine.

ThisEthernetWebServer_SSL library, from v1.2.0, also provides high-levelHTTP and WebSocket Client with the functions are similar and compatible to those ofArduinoHttpClient Library

The library provides these features:

1. TCP Server and Client
2. UDP Server and Client
3. HTTP Server and HTTP/HTTPS Client
4. HTTPS GET and POST requests, provides argument parsing, handles one client at a time.
5. High-level HTTP (GET, POST, PUT, PATCH, DELETE) and WebSocket Client. From v1.2.0.

Library is based on and modified from:

1. Ivan Grokhotkov's ESP8266WebServer
2. Ivan Grokhotkov's ESP32 WebServer
3. OPEnSLab-OSU's SSLClient v1.6.9
4. ArduinoHttpClient Library

The EthernetWebServer class, found inEthernetWebServer.h header, is a simple WebServer class, knowing how to handle HTTP requests such as GET and POST and can only support one one client at a time.

The EthernetSSLClient class, found inSSLClient.h header, is a simple WebClient class, knowing how to handle HTTP/HTTPS requests such as GET and POST and can only support one client at a time.

ThisEthernetWebServer_SSL library currently supports these following boards:

1. nRF52 boards, such asAdaFruit Feather nRF52832, nRF52840 Express, BlueFruit Sense, Itsy-Bitsy nRF52840 Express, Metro nRF52840 Express, NINA_B302_ublox, NINA_B112_ublox, etc.. Currently SSL WebClient is not working.
2. SAM DUE
3. SAMD21

• Arduino SAMD21: ZERO, MKRs, NANO_33_IOT, etc.
• Adafruit SAMD21 (M0): ItsyBitsy M0, Feather M0, Feather M0 Express, Metro M0 Express, Circuit Playground Express, Trinket M0, PIRkey, Hallowing M0, Crickit M0, etc.
• SeeedStudio: LoRaWAN, Zero, Femto M0, XIAO M0, Wio GPS Board, etc.

4. SAMD51

• Adafruit SAMD51 (M4): Metro M4, Grand Central M4, ItsyBitsy M4, Feather M4 Express, Trellis M4, Metro M4 AirLift Lite, MONSTER M4SK Express, Hallowing M4, etc.
• Seeeduino: WIO Terminal, Grove UI Wireless

5. Teensy (4.1, 4.0, 3.6, 3.5, 3,2, 3.1, 3.0, LC) with SPI, SPI1, SPI2

6. AVR Mega1280, 2560, ADK.. SSL WebClient not supported yet. CheckTrivial sketch won't compile using Arduino 1.8.13

7. ESP32

8. ESP8266. SSL WebClient not supported yet. CheckHTTPS GET request - ESP8266 - ENC28j60

9. RP2040-based boards, such asRASPBERRY_PI_PICO, ADAFRUIT_FEATHER_RP2040 and GENERIC_RP2040, usingArduino-mbed RP2040 core orEarle Philhower's arduino-pico core withSPI, SPI1.

10. Portenta_H7

11. Seeeduino nRF52840-based boards such as XIAO_NRF52840 and XIAO_NRF52840_SENSE, etc. using Seeedmbed ornRF52 core

1. W5x00 usingEthernet_Generic library
2. W5x00 usingEthernet,EthernetLarge,Ethernet2 orEthernet3 library
3. ENC28J60 usingEthernetENC orUIPEthernet library
4. Teensy 4.1 built-in Ethernet usingNativeEthernet library
5. Teensy 4.1 built-in Ethernet usingQNEthernet library
6. Portenta_H7 Ethernet usingPortenta_Ethernet library

1. Arduino IDE 1.8.19+ for Arduino.
2. Arduino AVR core 1.8.6+ for Arduino (Use Arduino Board Manager) AVR boards.
3. Teensy core v1.57+ for Teensy (4.1, 4.0, 3.6, 3.5, 3,2, 3.1, 3.0) boards.
4. Arduino SAM DUE core v1.6.12+ for SAM DUE ARM Cortex-M3 boards.
5. Arduino SAMD core 1.8.13+ for SAMD ARM Cortex-M0+ boards.
6. Adafruit SAMD core 1.7.11+ for SAMD ARM Cortex-M0+ and M4 boards (Nano 33 IoT, etc.).
7. Seeeduino SAMD core 1.8.3+ for SAMD21/SAMD51 boards (XIAO M0, Wio Terminal, etc.).
8. Adafruit nRF52 v1.3.0+ for nRF52 boards such as Adafruit NRF52840_FEATHER, NRF52832_FEATHER, NRF52840_FEATHER_SENSE, NRF52840_ITSYBITSY, NRF52840_CIRCUITPLAY, NRF52840_CLUE, NRF52840_METRO, NRF52840_PCA10056, PARTICLE_XENON,NINA_B302_ublox, etc.
9. ESP32 Core 2.0.6+ for ESP32-based boards.
10. ESP8266 Core 3.0.2+ for ESP8266-based boards.. To use ESP8266 core 2.7.1+ for LittleFS.
11. ArduinoCore-mbed mbed_rp2040, mbed_nano, mbed_portenta core 3.5.1+ for Arduino (Use Arduino Board Manager)Portenta_H7, RP2040-based boards, such as Nano_RP2040_Connect, RASPBERRY_PI_PICO.
12. Earle Philhower's arduino-pico core v2.6.5+ for RP2040-based boards such asRASPBERRY_PI_PICO, ADAFRUIT_FEATHER_RP2040 and GENERIC_RP2040, etc.
13. ArduinoCore-fab-sam core v1.11.0+ for SAMD21/SAMD51-based boards.
14. Seeeduino nRF52 core 1.0.0+ for Seeed nRF52840-based boards such asSeeed_XIAO_NRF52840 and Seeed_XIAO_NRF52840_SENSE.
15. Seeeduino mbed core 2.7.2+ for Seeed nRF52840-based boards such asSEEED_XIAO_NRF52840 and SEEED_XIAO_NRF52840_SENSE
16. Functional-VLPP library v1.0.2+ to use server's lambda function. To install. check
17. Depending on which Ethernet card you're using:

• Ethernet_Generic library v2.7.1+ for W5100, W5200 and W5500/WIZ550io/WIZ850io/USR-ES1 with Wiznet W5500 chip.
• EthernetENC library v2.0.3+ for ENC28J60..New and Better
• UIPEthernet library v2.0.12+ for ENC28J60.
• NativeEthernet Library version stable111+ for Teensy 4.1 built-in Ethernet.
• QNEthernet Library version v0.17.0+ for Teensy 4.1 built-in Ethernet.New

The best and easiest way is to useArduino Library Manager. Search forEthernetWebServer_SSL, then select / install the latest version.You can also use this link for more detailed instructions

1. Navigate toEthernetWebServer_SSL page.
2. Download the latest releaseEthernetWebServer_SSL-main.zip.
3. Extract the zip file toEthernetWebServer_SSL-main directory
4. Copy the wholeEthernetWebServer_SSL-main folder to Arduino libraries' directory such as~/Arduino/libraries/.

1. InstallVS Code
2. InstallPlatformIO
3. InstallEthernetWebServer_SSL library by usingLibrary Manager. Search for EthernetWebServer_SSL inPlatform.io Author's Libraries
4. Use includedplatformio.ini file from examples to ensure that all dependent libraries will installed automatically. Please visit documentation for the other options and examples atProject Configuration File

To be able to compile, run and automatically detect and display BOARD_NAME on nRF52840/nRF52832 boards, you have to copy the wholenRF52 Packages_Patches directory into Adafruit nRF52 directory (~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0).

Supposing the Adafruit nRF52 version is 1.3.0. These files must be copied into the directory:

• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/platform.txt
• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/boards.txt
• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/cores/nRF5/Udp.h
• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/cores/nRF5/Print.h
• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/cores/nRF5/Print.cpp
• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/variants/NINA_B302_ublox/variant.h
• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/variants/NINA_B302_ublox/variant.cpp
• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/variants/NINA_B112_ublox/variant.h
• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/variants/NINA_B112_ublox/variant.cpp
• ~/.arduino15/packages/adafruit/hardware/nrf52/1.3.0/cores/nRF5/Udp.h

Whenever a new version is installed, remember to copy these files into the new version directory. For example, new version is x.yy.zThese files must be copied into the directory:

• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/platform.txt
• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/boards.txt
• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/cores/nRF5/Udp.h
• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/cores/nRF5/Print.h
• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/cores/nRF5/Print.cpp
• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/variants/NINA_B302_ublox/variant.h
• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/variants/NINA_B302_ublox/variant.cpp
• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/variants/NINA_B112_ublox/variant.h
• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/variants/NINA_B112_ublox/variant.cpp
• ~/.arduino15/packages/adafruit/hardware/nrf52/x.yy.z/cores/nRF5/Udp.h

To be able to compile and run on Teensy boards, you have to copy the files inPackages_Patches for Teensy directory into Teensy hardware directory (./arduino-1.8.19/hardware/teensy/avr/boards.txt).

Supposing the Arduino version is 1.8.19. These files must be copied into the directory:

• ./arduino-1.8.19/hardware/teensy/avr/boards.txt
• ./arduino-1.8.19/hardware/teensy/avr/cores/teensy/Stream.h
• ./arduino-1.8.19/hardware/teensy/avr/cores/teensy3/Stream.h
• ./arduino-1.8.19/hardware/teensy/avr/cores/teensy4/Stream.h

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zzThese files must be copied into the directory:

• ./arduino-x.yy.zz/hardware/teensy/avr/boards.txt
• ./arduino-x.yy.zz/hardware/teensy/avr/cores/teensy/Stream.h
• ./arduino-x.yy.zz/hardware/teensy/avr/cores/teensy3/Stream.h
• ./arduino-x.yy.zz/hardware/teensy/avr/cores/teensy4/Stream.h

To be able to compile and run on SAM DUE boards, you have to copy the wholeSAM DUE directory into Arduino sam directory (~/.arduino15/packages/arduino/hardware/sam/1.6.12).

Supposing the Arduino SAM core version is 1.6.12. This file must be copied into the directory:

• ~/.arduino15/packages/arduino/hardware/sam/1.6.12/platform.txt

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zzThis file must be copied into the directory:

• ~/.arduino15/packages/arduino/hardware/sam/x.yy.zz/platform.txt

To be able to compile, run and automatically detect and display BOARD_NAME on Arduino SAMD (Nano-33-IoT, etc) boards, you have to copy the wholeArduino SAMD Packages_Patches directory into Arduino SAMD directory (~/.arduino15/packages/arduino/hardware/samd/1.8.13).

Supposing the Arduino SAMD version is 1.8.13. Now only one file must be copied into the directory:

• ~/.arduino15/packages/arduino/hardware/samd/1.8.13/platform.txt

Whenever a new version is installed, remember to copy this files into the new version directory. For example, new version is x.yy.zz

This file must be copied into the directory:

• ~/.arduino15/packages/arduino/hardware/samd/x.yy.zz/platform.txt

Supposing the Arduino SAMD version is 1.8.9. These files must be copied into the directory:

• ~/.arduino15/packages/arduino/hardware/samd/1.8.9/platform.txt
• ~/.arduino15/packages/arduino/hardware/samd/1.8.9/cores/arduino/Arduino.h

Whenever a new version is installed, remember to copy these files into the new version directory. For example, new version is x.yy.z

These files must be copied into the directory:

• ~/.arduino15/packages/arduino/hardware/samd/x.yy.z/platform.txt
• ~/.arduino15/packages/arduino/hardware/samd/x.yy.z/cores/arduino/Arduino.h

This is mandatory to fix thenotorious Arduino SAMD compiler error. SeeImprove Arduino compatibility with the STL (min and max macro)

 ...\arm-none-eabi\include\c++\7.2.1\bits\stl_algobase.h:243:56: error: macro "min" passed 3 arguments, but takes just 2     min(const _Tp& __a, const _Tp& __b, _Compare __comp)

Whenever the above-mentioned compiler error issue is fixed with the new Arduino SAMD release, you don't need to copy theArduino.h file anymore.

To be able to compile, run and automatically detect and display BOARD_NAME on Adafruit SAMD (Itsy-Bitsy M4, etc) boards, you have to copy the wholeAdafruit SAMD Packages_Patches directory into Adafruit samd directory (~/.arduino15/packages/adafruit/hardware/samd/1.7.11).

Supposing the Adafruit SAMD core version is 1.7.11. These files must be copied into the directory:

• ~/.arduino15/packages/adafruit/hardware/samd/1.7.11/platform.txt
• ~/.arduino15/packages/adafruit/hardware/samd/1.7.11/cores/arduino/Print.h
• ~/.arduino15/packages/adafruit/hardware/samd/1.7.11/cores/arduino/Print.cpp

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zzThese files must be copied into the directory:

• ~/.arduino15/packages/adafruit/hardware/samd/x.yy.zz/platform.txt
• ~/.arduino15/packages/adafruit/hardware/samd/x.yy.zz/cores/arduino/Print.h
• ~/.arduino15/packages/adafruit/hardware/samd/x.yy.zz/cores/arduino/Print.cpp

To be able to compile, run and automatically detect and display BOARD_NAME on Seeeduino SAMD (XIAO M0, Wio Terminal, etc) boards, you have to copy the wholeSeeeduino SAMD Packages_Patches directory into Seeeduino samd directory (~/.arduino15/packages/Seeeduino/hardware/samd/1.8.3).

Supposing the Seeeduino SAMD core version is 1.8.3. These files must be copied into the directory:

• ~/.arduino15/packages/Seeeduino/hardware/samd/1.8.3/platform.txt
• ~/.arduino15/packages/Seeeduino/hardware/samd/1.8.3/cores/arduino/Arduino.h
• ~/.arduino15/packages/Seeeduino/hardware/samd/1.8.3/cores/arduino/Print.h
• ~/.arduino15/packages/Seeeduino/hardware/samd/1.8.3/cores/arduino/Print.cpp

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zzThese files must be copied into the directory:

• ~/.arduino15/packages/Seeeduino/hardware/samd/x.yy.zz/platform.txt
• ~/.arduino15/packages/Seeeduino/hardware/samd/x.yy.zz/cores/arduino/Arduino.h
• ~/.arduino15/packages/Seeeduino/hardware/samd/x.yy.zz/cores/arduino/Print.h
• ~/.arduino15/packages/Seeeduino/hardware/samd/x.yy.zz/cores/arduino/Print.cpp

To use LAN8720 on some STM32 boards

• Nucleo-144 (F429ZI, NUCLEO_F746NG, NUCLEO_F746ZG, NUCLEO_F756ZG)
• Discovery (DISCO_F746NG)
• STM32F4 boards (BLACK_F407VE, BLACK_F407VG, BLACK_F407ZE, BLACK_F407ZG, BLACK_F407VE_Mini, DIYMORE_F407VGT, FK407M1)

you have to copy the filesstm32f4xx_hal_conf_default.h andstm32f7xx_hal_conf_default.h into STM32 stm32 directory (~/.arduino15/packages/STM32/hardware/stm32/2.3.0/system) to overwrite the old files.

Supposing the STM32 stm32 core version is 2.3.0. These files must be copied into the directory:

• ~/.arduino15/packages/STM32/hardware/stm32/2.3.0/system/STM32F4xx/stm32f4xx_hal_conf_default.h for STM32F4.
• ~/.arduino15/packages/STM32/hardware/stm32/2.3.0/system/STM32F7xx/stm32f7xx_hal_conf_default.h for Nucleo-144 STM32F7.

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zz,these files must be copied into the corresponding directory:

• ~/.arduino15/packages/STM32/hardware/stm32/x.yy.zz/system/STM32F4xx/stm32f4xx_hal_conf_default.h
• `~/.arduino15/packages/STM32/hardware/stm32/x.yy.zz/system/STM32F7xx/stm32f7xx_hal_conf_default.h

To use Serial1 on some STM32 boards without Serial1 definition (Nucleo-144 NUCLEO_F767ZI, Nucleo-64 NUCLEO_L053R8, etc.) boards, you have to copy the filesSTM32 variant.h into STM32 stm32 directory (~/.arduino15/packages/STM32/hardware/stm32/2.3.0). You have to modify the files corresponding to your boards, this is just an illustration how to do.

Supposing the STM32 stm32 core version is 2.3.0. These files must be copied into the directory:

• ~/.arduino15/packages/STM32/hardware/stm32/2.3.0/variants/STM32F7xx/F765Z(G-I)T_F767Z(G-I)T_F777ZIT/NUCLEO_F767ZI/variant.h for Nucleo-144 NUCLEO_F767ZI.
• ~/.arduino15/packages/STM32/hardware/stm32/2.3.0/variants/STM32L0xx/L052R(6-8)T_L053R(6-8)T_L063R8T/NUCLEO_L053R8/variant.h for Nucleo-64 NUCLEO_L053R8.

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zz,these files must be copied into the corresponding directory:

• ~/.arduino15/packages/STM32/hardware/stm32/x.yy.zz/variants/STM32F7xx/F765Z(G-I)T_F767Z(G-I)T_F777ZIT/NUCLEO_F767ZI/variant.h
• ~/.arduino15/packages/STM32/hardware/stm32/x.yy.zz/variants/STM32L0xx/L052R(6-8)T_L053R(6-8)T_L063R8T/NUCLEO_L053R8/variant.h

To be able to automatically detect and display BOARD_NAME on RP2040-based boards (RASPBERRY_PI_PICO, ADAFRUIT_FEATHER_RP2040, GENERIC_RP2040, etc) boards, you have to copy the fileRP2040 platform.txt into rp2040 directory (~/.arduino15/packages/rp2040/hardware/rp2040/1.4.0).

Supposing the rp2040 core version is 1.4.0. This file must be copied into the directory:

• ~/.arduino15/packages/rp2040/hardware/rp2040/1.4.0/platform.txt

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zzThis file must be copied into the directory:

• ~/.arduino15/packages/rp2040/hardware/rp2040/x.yy.zz/platform.txt

With core after v1.5.0, this step is not necessary anymore thanks to the PRAdd -DBOARD_NAME="{build.board}" #136.

Some libraries, such asAdafruit DHT-sensor-library, require the definition of microsecondsToClockCycles().To be able to compile and run on RP2040-based boards, you have to copy the files inRP2040 Arduino.h into rp2040 directory (~/.arduino15/packages/rp2040/hardware/rp2040/1.4.0).

Supposing the rp2040 core version is 1.4.0. This file must be copied to replace:

• ~/.arduino15/packages/rp2040/hardware/rp2040/1.4.0/cores/rp2040/Arduino.h

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zzThis file must be copied to replace:

• ~/.arduino15/packages/rp2040/hardware/rp2040/x.yy.zz/cores/rp2040/Arduino.h

With core after v1.5.0, this step is not necessary anymore thanks to the PRAdd defs for compatibility #142.

To be able to upload firmware to Portenta_H7 using Arduino IDE in Linux (Ubuntu, etc.), you have to copy the fileportenta_post_install.sh into mbed_portenta directory (~/.arduino15/packages/arduino/hardware/mbed_portenta/3.4.1/portenta_post_install.sh).

Then run the following command usingsudo

$ cd ~/.arduino15/packages/arduino/hardware/mbed_portenta/3.4.1$ chmod 755 portenta_post_install.sh$ sudo ./portenta_post_install.sh

This will create the file/etc/udev/rules.d/49-portenta_h7.rules as follows:

# Portenta H7 bootloader mode UDEV rulesSUBSYSTEMS=="usb", ATTRS{idVendor}=="2341", ATTRS{idProduct}=="035b", GROUP="plugdev", MODE="0666"

Supposing the ArduinoCore-mbed core version is 3.4.1. Now only one file must be copied into the directory:

• ~/.arduino15/packages/arduino/hardware/mbed_portenta/3.4.1/portenta_post_install.sh

Whenever a new version is installed, remember to copy this files into the new version directory. For example, new version is x.yy.zz

This file must be copied into the directory:

• ~/.arduino15/packages/arduino/hardware/mbed_portenta/x.yy.zz/portenta_post_install.sh

To avoid compile error relating to PROGMEM, you have to copy the fileRealtek AmebaD core pgmspace.h into Realtek AmebaD directory (~/.arduino15/packages/realtek/hardware/AmebaD/3.1.4/cores/ambd/avr/pgmspace.h).

Supposing the Realtek AmebaD core version is 3.1.4. This file must be copied into the directory:

• ~/.arduino15/packages/realtek/hardware/AmebaD/3.1.4/cores/ambd/avr/pgmspace.h

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zzThis file must be copied into the directory:

• ~/.arduino15/packages/realtek/hardware/AmebaD/x.yy.zz/cores/ambd/avr/pgmspace.h

To avoid compile error relating to SAMD21/SAMD51, you have to copy the fileArduinoCore-fab-sam core pgmspace.h intoArduinoCore-fab-sam samd directory (~/.arduino15/packages/Fab_SAM_Arduino/hardware/samd/1.9.0/boards.txt).

Supposing theArduinoCore-fab-sam samd core version is 1.9.0. This file must be copied into the directory:

• ~/.arduino15/packages/Fab_SAM_Arduino/hardware/samd/1.9.0/boards.txt

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zzThis file must be copied into the directory:

• ~/.arduino15/packages/Fab_SAM_Arduino/hardware/samd/x.yy.zz/boards.txt

To be able to compile, run and automatically detect and display BOARD_NAME on Seeeduino RP2040 (XIAO RP2040, Wio RP2040 Mini) boards, you have to copy the wholeSeeeduino RP2040 Packages_Patches directory into Seeeduino samd directory (~/.arduino15/packages/Seeeduino/hardware/rp2040/2.7.2).

Supposing the Seeeduino RP2040 core version is 2.7.2. These files must be copied into the directory:

• ~/.arduino15/packages/Seeeduino/hardware/rp2040/2.7.2/boards.txt
• ~/.arduino15/packages/Seeeduino/hardware/rp2040/2.7.2/variants/Seeed_XIAO_RP2040/pins_arduino.h

Whenever a new version is installed, remember to copy this file into the new version directory. For example, new version is x.yy.zzThese files must be copied into the directory:

• ~/.arduino15/packages/Seeeduino/hardware/samd/x.yy.zz/boards.txt
• ~/.arduino15/packages/Seeeduino/hardware/samd/x.yy.zz/variants/Seeed_XIAO_RP2040/pins_arduino.h

To be able to compile and run on Xiao nRF52840 boards, you have to copy the wholenRF52 1.0.0 directory into Seeeduino nRF52 directory (~/.arduino15/packages/Seeeduino/hardware/nrf52/1.0.0).

Supposing the Seeeduino nRF52 version is 1.0.0. These files must be copied into the directory:

• ~/.arduino15/packages/Seeeduino/hardware/nrf52/1.0.0/platform.txt
• ~/.arduino15/packages/Seeeduino/hardware/nrf52/1.0.0/cores/nRF5/Print.h
• ~/.arduino15/packages/Seeeduino/hardware/nrf52/1.0.0/cores/nRF5/Print.cpp
• ~/.arduino15/packages/Seeeduino/hardware/nrf52/1.0.0/cores/nRF5/Udp.h

Whenever a new version is installed, remember to copy these files into the new version directory. For example, new version is x.yy.zThese files must be copied into the directory:

• ~/.arduino15/packages/Seeeduino/hardware/nrf52/x.yy.z/platform.txt
• ~/.arduino15/packages/Seeeduino/hardware/nrf52/x.yy.z/cores/nRF5/Print.h
• ~/.arduino15/packages/Seeeduino/hardware/nrf52/x.yy.z/cores/nRF5/Print.cpp
• ~/.arduino15/packages/Seeeduino/hardware/nrf52/x.yy.z/cores/nRF5/Udp.h

If your application requires 2K+ HTML page, the currentEthernet library must be modified if you are using W5200/W5500 Ethernet shields. W5100 is not supported for 2K+ buffer. If you use boards requiring different CS/SS pin for W5x00 Ethernet shield, for example ESP32, ESP8266, nRF52, etc., you also have to modify the following libraries to be able to specify the CS/SS pin correctly.

To fixEthernet library, just copy these following files into theEthernet library directory to overwrite the old files:

• Ethernet.h
• Ethernet.cpp
• EthernetServer.cpp
• w5100.h
• w5100.cpp

You can also use the forked and modified library atPatched Ethernet

To fixEthernetLarge library, just copy these following files into theEthernetLarge library directory to overwrite the old files:

• EthernetLarge.h
• EthernetLarge.cpp
• EthernetServer.cpp
• w5100.h
• w5100.cpp

You can also use the forked and modified library atPatched EthernetLarge

To fixEthernet2 library, just copy these following files into theEthernet2 library directory to overwrite the old files:

• Ethernet2.h
• Ethernet2.cpp

To add UDP Multicast support, necessary for theUPnP_Generic library:

• EthernetUdp2.h
• EthernetUdp2.cpp

You can also use the forked and modified library atPatched Ethernet2

5. To fixEthernet3 library, just copy these following files into theEthernet3 library directory to overwrite the old files:

• Ethernet3.h
• Ethernet3.cpp

You can also use the forked and modified library atPatched Ethernet3

To be able to compile and run on nRF52 boards with ENC28J60 using UIPEthernet library, you have to copy these following files into the UIPEthernetutility directory to overwrite the old files:

• UIPEthernet.h
• UIPEthernet.cpp
• Enc28J60Network.h
• Enc28J60Network.cpp

To fixESP32 compile error, just copy the following file into theESP32 cores/esp32 directory (e.g. ./arduino-1.8.13/hardware/espressif/cores/esp32) to overwrite the old file:

• Server.h

To fixESP8266 compile error such as

error: 'class EthernetClass' has no member named 'init'Ethernet.init (USE_THIS_SS_PIN);

just rename the following file in ./arduino-1.8.13/hardware/esp8266com/esp8266/libraries/Ethernet directory

• FromEthernet.h toEthernet_ESP8266.h

Please have a look atESP_WiFiManager Issue 39: Not able to read analog port when using the autoconnect example to have more detailed description and solution of the issue.

• ADC1 controls ADC function for pinsGPIO32-GPIO39
• ADC2 controls ADC function for pinsGPIO0, 2, 4, 12-15, 25-27

Look in fileadc_common.c

In ADC2, there're two locks used for different cases:

1. lock shared with app and Wi-Fi:ESP32:When Wi-Fi using the ADC2, we assume it will never stop, so app checks the lock and returns immediately if failed.ESP32S2:The controller's control over the ADC is determined by the arbiter. There is no need to control by lock.

2. lock shared between tasks:when several tasks sharing the ADC2, we want to guaranteeall the requests will be handled.Since conversions are short (about 31us), app returns the lock very soon,we use a spinlock to stand there waiting to do conversions one by one.

adc2_spinlock should be acquired first, then adc2_wifi_lock or rtc_spinlock.

• In order to useADC2 for other functions, we have toacquire complicated firmware locks and very difficult to do
• So, it's not advisable to useADC2 with WiFi/BlueTooth (BT/BLE).
• UseADC1, and pins GPIO32-GPIO39
• If somehow it's a must to use those pins serviced byADC2 (GPIO0, 2, 4, 12, 13, 14, 15, 25, 26 and 27), use thefix mentioned at the end ofESP_WiFiManager Issue 39: Not able to read analog port when using the autoconnect example to work with ESP32 WiFi/BlueTooth (BT/BLE).

The easiest way is to use

#defineUSE_ETHERNET_WRAPPERtrue

then selectone and only one Ethernet library to use as follows:

• Standard W5x00 Ethernet_Generic library is used by default, in the sketch, just be sure to comment out or leave these #defines to be false :

// Only one if the following to be true#defineUSE_UIP_ETHERNETfalse#defineUSE_ETHERNET_PORTENTA_H7false#defineUSE_NATIVE_ETHERNETfalse#defineUSE_QN_ETHERNETfalse#defineUSE_ETHERNET_GENERICfalse#defineUSE_ETHERNET_ESP8266false #defineUSE_ETHERNET_ENCfalse#defineUSE_CUSTOM_ETHERNETfalse

To use W5x00 Ethernet, for example using Ethernet_Generic library

// Only one if the following to be true#defineUSE_UIP_ETHERNETfalse#defineUSE_ETHERNET_PORTENTA_H7false#defineUSE_NATIVE_ETHERNETfalse#defineUSE_QN_ETHERNETfalse#defineUSE_ETHERNET_GENERICtrue#defineUSE_ETHERNET_ESP8266false#defineUSE_ETHERNET_ENCfalse#defineUSE_CUSTOM_ETHERNETfalse

• To use ENC28J60 Ethernet, using EthernetENC library (NEW and Better)

// Only one if the following to be true#defineUSE_UIP_ETHERNETfalse#defineUSE_ETHERNET_PORTENTA_H7false#defineUSE_NATIVE_ETHERNETfalse#defineUSE_QN_ETHERNETfalse#defineUSE_ETHERNET_GENERICfalse#defineUSE_ETHERNET_ESP8266false#defineUSE_ETHERNET_ENCtrue#defineUSE_CUSTOM_ETHERNETfalse

• To use ENC28J60 Ethernet, using UIPEthernet library:

// Only one if the following to be true#defineUSE_UIP_ETHERNETtrue#defineUSE_ETHERNET_PORTENTA_H7false#defineUSE_NATIVE_ETHERNETfalse#defineUSE_QN_ETHERNETfalse#defineUSE_ETHERNET_GENERICfalse#defineUSE_ETHERNET_ESP8266false #defineUSE_ETHERNET_ENCfalse#defineUSE_CUSTOM_ETHERNETfalse

• To use another Ethernet libraryFor example, EthernetLarge library

// Only one if the following to be true#defineUSE_UIP_ETHERNETfalse#defineUSE_ETHERNET_PORTENTA_H7false#defineUSE_NATIVE_ETHERNETfalse#defineUSE_QN_ETHERNETfalse#defineUSE_ETHERNET_GENERICfalse#defineUSE_ETHERNET_ESP8266false #defineUSE_ETHERNET_ENCfalse#defineUSE_CUSTOM_ETHERNETtrue//Must be placed before #include <EthernetWebServer.h>#include<EthernetLarge.h>...#include<EthernetWebServer.h>

• Only for Teensy 4.1, to use NativeEthernet library

#if defined(__IMXRT1062__)// For Teensy 4.1/4.0  #if defined(ARDUINO_TEENSY41)    #defineBOARD_TYPE"TEENSY 4.1"// Use true for NativeEthernet Library, false if using other Ethernet libraries    #defineUSE_NATIVE_ETHERNETtrue    #defineUSE_QN_ETHERNETfalse  #elif defined(ARDUINO_TEENSY40)    #defineBOARD_TYPE"TEENSY 4.0"  #else    #defineBOARD_TYPE"TEENSY 4.x"  #endif      #elif defined(__MK66FX1M0__)  ....

• Only for Teensy 4.1, to use another Ethernet library, for example Ethernet_Generic library

#if defined(__IMXRT1062__)// For Teensy 4.1/4.0  #if defined(ARDUINO_TEENSY41)    #defineBOARD_TYPE"TEENSY 4.1"// Use true for NativeEthernet Library, false if using other Ethernet libraries    #defineUSE_NATIVE_ETHERNETfalse    #defineUSE_QN_ETHERNETfalse  #elif defined(ARDUINO_TEENSY40)    #defineBOARD_TYPE"TEENSY 4.0"  #else    #defineBOARD_TYPE"TEENSY 4.x"  #endif      #elif defined(__MK66FX1M0__)  ....  #defineUSE_UIP_ETHERNETfalse// Only one if the following to be true#defineUSE_ETHERNET_GENERICtrue#defineUSE_ETHERNET_ESP8266false#defineUSE_ETHERNET_ENCfalse#defineUSE_CUSTOM_ETHERNETfalse

• Only for Teensy 4.1, to use QNEthernet library

#if ( defined(CORE_TEENSY) && defined(__IMXRT1062__) && defined(ARDUINO_TEENSY41) )// For Teensy 4.1  #defineBOARD_TYPE"TEENSY 4.1"// Use true for NativeEthernet Library, false if using other Ethernet libraries  #defineUSE_NATIVE_ETHERNETfalse  #defineUSE_QN_ETHERNETtrue#else  #error Only Teensy 4.1 supported#endif#defineUSE_ETHERNET_WRAPPERfalse// Use true  for ENC28J60 and UIPEthernet library (https://github.com/UIPEthernet/UIPEthernet)// Use false for W5x00 and Ethernetx library      (https://www.arduino.cc/en/Reference/Ethernet)#defineUSE_UIP_ETHERNETfalse#defineUSE_ETHERNET_GENERICfalse#defineUSE_ETHERNET_ESP8266false #defineUSE_ETHERNET_ENCfalse#defineUSE_CUSTOM_ETHERNETfalse#if USE_NATIVE_ETHERNET  #include"NativeEthernet.h"  #warning Using NativeEthernet lib for Teensy 4.1. Must also use Teensy Packages Patch or error  #defineSHIELD_TYPE"using NativeEthernet"#elif USE_QN_ETHERNET  #include"QNEthernet.h"usingnamespaceqindesign::network;  #warning Using QNEthernet lib for Teensy 4.1. Must also use Teensy Packages Patch or error  #defineSHIELD_TYPE"using QNEthernet"  #endif

• TheEthernet_Shield_W5200, EtherCard, EtherSia libraries are not supported. Don't use unless you know how to modify those libraries.
• Requests to support for any future custom Ethernet library will be ignored.Use at your own risk.

The default CS/SS pin is GPIO4(D2) for ESP8266, GPIO22 for ESP32, 10 for all other boards.

If the default pin is not correct, the easiest way is to select the CS/SS pin (e.g. 22) to use as follows:

// To override the default CS/SS pin. Don't use unless you know exactly which pin to use#defineUSE_THIS_SS_PIN22

To avoid using the default but not-working Ethernet library of ESP8266, rename the Ethernet.h/cpp to Ethernet_ESP8266.h/cpp to avoid library conflict if you're using the Arduino Ethernet library. The Ethernet_Generic, Ethernet2, Ethernet3, EthernetLarge library can be used without conflict.

These pins are tested OK with ESP8266 and W5x00

// For ESP8266// Pin                D0(GPIO16)    D1(GPIO5)    D2(GPIO4)    D3(GPIO0)    D4(GPIO2)    D8// Ethernet           0                 X            X            X            X        0// Ethernet2          X                 X            X            X            X        0// Ethernet3          X                 X            X            X            X        0// EthernetLarge      X                 X            X            X            X        0// Ethernet_ESP8266   0                 0            0            0            0        0// D2 is safe to used for Ethernet, Ethernet2, Ethernet3, EthernetLarge libs// Must use library patch for Ethernet, EthernetLarge libraries//Ethernet.setCsPin (USE_THIS_SS_PIN);Ethernet.init (USE_THIS_SS_PIN);

• ForEthernet_Generic library only, simply use as follows to have large buffer similar to EthernetLarge library

#defineETHERNET_LARGE_BUFFERS

• ForEthernet3 library only, use as follows

// Use  MAX_SOCK_NUM = 4 for 4K, 2 for 8K, 1 for 16K RX/TX buffer#ifndef ETHERNET3_MAX_SOCK_NUM  #defineETHERNET3_MAX_SOCK_NUM4#endifEthernet.setCsPin (USE_THIS_SS_PIN);Ethernet.init (ETHERNET3_MAX_SOCK_NUM);

sendContent_P() and send_P() buffer size is set default at 4 Kbytes, and minimum is 256 bytes. If you need to change, just add a definition, e.g.:

#defineSENDCONTENT_P_BUFFER_SZ2048

Note that the buffer size must be larger than 256 bytes. SeeSending GZIP HTML ~ 120kb+ (suggested enhancement).

• ForEthernet_Generic library only, to useSPI2 for ESP32

#defineUSING_SPI2true

Pin to use forSPI2

MOSI:  13MISO:  12SCK:   14SS:    5

• ForEthernet_Generic library only, to useSPI1 for RP2040 usingarduino-pico core orArduinoCore-mbed

#defineUSING_SPI2true

Pin to use forSPI1

MOSI:  15MISO:  12SCK:   14SS:    13

• ForEthernet_Generic library only, to useSPI1/SPI2 for Teensy 4.x

#include<SPI.h>// For RPI Pico using Mbed RP2040 core#if (USING_SPI2)  #defineUSING_CUSTOM_SPItrue// Teensy4.1// SCK1: 27,  MOSI1: 26, MISO1:  1, SS1/CS1:  0 for SPI1// SCK2: 45,  MOSI2: 43, MISO2: 32, SS2/CS2: 44 for SPI2// Teensy4.0, in the back, untested// SCK1: 27,  MOSI1: 26, MISO1: 1, SS1/CS1: 0 for SPI1  #defineCUR_PIN_MISO1  #defineCUR_PIN_MOSI26  #defineCUR_PIN_SCK27  #defineCUR_PIN_SS0  #defineSPI_NEW_INITIALIZEDtrue// SPI1  SPIClassSPI_New((uintptr_t)&IMXRT_LPSPI3_S, (uintptr_t)&SPIClass::spiclass_lpspi3_hardware);// SPI2//SPIClass SPI_New((uintptr_t)&IMXRT_LPSPI1_S, (uintptr_t)&SPIClass::spiclass_lpspi1_hardware);    #warning Using USE_THIS_SS_PIN = CUR_PIN_SS = 38  #if defined(USE_THIS_SS_PIN)    #undef USE_THIS_SS_PIN  #endif     #defineUSE_THIS_SS_PIN       CUR_PIN_SS#endif

Pin to use forSPI1

MOSI:  26MISO:   1SCK:   27SS:     0

Pin to use forSPI2

MOSI:  43MISO:  32SCK:   45SS:    44

EthernetInit();

EthernetWebServerserver(80);

Creates the EthernetWebServer class object.

Parameters:

host port number:int port (default is the standard HTTP port 80)

Starting the server

voidbegin();

Handling incoming client requests

voidhandleClient();

Disabling the server

voidclose();voidstop();

Both methods function the same

Client request handlers

voidon();voidaddHandler();voidonNotFound();voidonFileUpload();

Example:

server.on("/", handlerFunction);server.onNotFound(handlerFunction);// called when handler is not assignedserver.onFileUpload(handlerFunction);// handle file uploads

Sending responses to the client

voidsend();voidsend_P();

Parameters:

code - HTTP response code, can be200 or404, etc.

content_type - HTTP content type, like"text/plain" or"image/png", etc.

content - actual content body

Getting information about request arguments

const String &arg();const String &argName();intargs();boolhasArg();

Function usage:

arg - get request argument value, usearg("plain") to get POST body

argName - get request argument name

args - get arguments count

hasArg - check if argument exist

Getting information about request headers

const String &header();const String &headerName();const String &hostHeader();intheaders();boolhasHeader();

Function usage:

header - get request header value

headerName - get request header name

hostHeader - get request host header if available, else empty string

headers - get header count

hasHeader - check if header exist

Authentication

boolauthenticate();voidrequestAuthentication();

Function usage:

authenticate - server authentication, returns true if client is authenticated else false

requestAuthentication - sends authentication failure response to the client

Example Usage:

if(!server.authenticate(username, password)){  server.requestAuthentication();}

const String &uri();// get the current uriHTTPMethodmethod();// get the current methodWiFiClientclient();// get the current clientHTTPUpload &upload();// get the current uploadvoidsetContentLength();// set content lengthvoidsendHeader();// send HTTP headervoidsendContent();// send contentvoidsendContent_P();voidcollectHeaders();// set the request headers to collectvoidserveStatic();size_tstreamFile();

Have a look at marvellous documentation inSSLClient for more information about the underlying EthernetSSLClient.

The following info is taken and modified fromSSLClient README

Using EthernetSSLClient is similar to using any other Arduino-based Client class. There are a few extra things, however, that you will need to get started:

Your board should have a lot of resources (>110kb flash and >7kb RAM), and your network peripheral should have a large internal buffer (>7kb).

You will need a header containing array of trust anchors (trust_anchors), which are used to verify the SSL connection later on.This file must generated for every project if connecting to different TLS/SSL WebServers. Check outTrustAnchors.md on how to generate this file for your project, and for more information about what a trust anchor is.

Once all those are ready, you can create an SSLClient object like this:

// Initialize the SSL client library// Arguments: EthernetClient, our trust anchorsEthernetClient    client;EthernetSSLClientsslClient(client, TAs, (size_t)TAs_NUM)

Where:

• EthernetClient - The type ofclient
• client - An instance of the EthernetClient class you are using for EthernetSSLClient. It is important that this instance be storedoutside theEthernetSSLClient declaration.

For instance:

EthernetSSLClient(EthernetClient() ...)

wouldn't work.

• TAs - The name of the trust anchor array created in step 2. If you generated a header using the tutorial this will probably beTAs.
• TAs_NUM - The number of trust anchors in TAs. If you generated a header using the tutorial this will probably beTAs_NUM.

Given this client, simply useEthernetSSLClient as you would the base client class:

if (sslClient.connect(www.arduino.cc,443)){// Make a HTTP request:  sslClient.println(GET /asciilogo.txt HTTP/1.1);  sslClient.println("User-Agent: SSLClientOverEthernet");  sslClient.print("Host:");  sslClient.println(server);  sslClient.println("Connection: close");  sslClient.println();  sslClient.flush();}else{// if you didn't get a connection to the server:  Serial.println("connection failed");}

sslClient.connect("www.arduino.cc", 443) can take 5-15 seconds to finish. This an unavoidable consequence of the SSL protocol, and is detailed inImplementation Notes.

For more information onEthernetSSLClient, check out theexamples,API documentation, or the rest of this README.

EthernetSSLClient was created to integrate SSL seamlessly with the Arduino infrastructure, and so it does just that: implementing the brilliantBearSSL as a proxy in front of any Arduino socket library.BearSSL is designed with low flash footprint in mind, and as a result does little verification of improper programming, relying on the developer to ensure the code is correct. SinceEthernetSSLClient is built specifically for the Arduino ecosystem, most ofEthernetSSLClient's code adds those programming checks back in, making debugging a fast and simple process.

EthernetSSLClient also allows for changing the debugging level by adding an additional parameter to the constructor:

EthernetClient    client;EthernetSSLClientsslClient(client, TAs, (size_t)TAs_NUM, 1, SSLClient::SSL_INFO);)

Logging is always outputted through theArduino Serial interface, so you'll need to setup Serial before you can view the SSL logs. Log levels are enumerated in ::DebugLevel. The log level is set toSSL_WARN by default.

WhenEthernetSSLClient encounters an error, it will attempt to terminate the SSL session gracefully if possible, and then close the socket. Simple error information can be found from EthernetSSLClient::getWriteError(), which will return a value from the ::Error enum. For more detailed diagnostics, you can look at the serial logs, which will be displayed if the log level is atSSL_ERROR or lower.

As you may have noticed in the documentation for EthernetSSLClient::write, calling this function does not actually write to the network. Instead, you must call EthernetSSLClient::available or EthernetSSLClient::flush, which will detect that the buffer is ready and write to the network (see EthernetSSLClient::write for details).

This was implemented as a buffered function because examples in Arduino libraries will often write to the network like so:

EthernetClient client;// ...// connect to ardiuino.cc over ssl (port 443 for websites)client.connect("www.arduino.cc",443);// ...// write an http request to the networkclient.write("GET /asciilogo.txt HTTP/1.1\r\n");client.write("Host: arduino.cc\r\n");client.write("Connection: close\r\n");// wait for responsewhile (!client.available()) {/* ...*/ }// ...

Notice that every single write() call immediately writes to the network, which is fine with most network clients. With SSL, however, if we are encrypting and writing to the network every write() call, this will result in a lot of small encryption tasks. Encryption takes a lot of time and code, so to reduce the overhead of an SSL connection, SSLClient::write implicitly buffers until the developer states that they are waiting for data to be received with EthernetSSLClient::available. A simple example can be found below:

// Initialize the SSL client library// Arguments: EthernetClient, our trust anchorsEthernetClient    client;EthernetSSLClientsslClient(client, TAs, (size_t)TAs_NUM)// ...// connect to arduino.cc over ssl (port 443 for websites)sslClient.connect("www.arduino.cc",443);// ...// add http request to the buffersslClient.write("GET /asciilogo.txt HTTP/1.1\r\n");sslClient.write("Host: arduino.cc\r\n");sslClient.write("Connection: close\r\n");// write the bytes to the network, then wait for responsewhile (!sslClient.available());// ...

If you would like to trigger a network write manually without using the EthernetSSLClient::available, you can also call EthernetSSLClient::flush, which will write all data and return when finished.

As detailed in theResources section,SSL handshakes take an extended period (1-4sec) to negotiate. To remedy this problem, BearSSL is able to keep aSSL session cache of the clients it has connected to. IfBearSSL successfully resumes anSSL session, it can reduce connection time to 100-500ms.

In order to useSSL session resumption:

• The website you are connecting to must support it. Support is widespread, but you can verify easily using theSSLLabs tool.
• You must reuse the sameEthernetSSLClient object (SSL Sessions are stored in the object itself).
• You must reconnect to the exact same server.

EthernetSSLClient automatically stores an IP address and hostname in each session, ensuring that if you callconnect("www.google.com"),EthernetSSLClient will use theSSL session with that hostname. However, because some websites have multiple servers on a single IP address (github.com being an example), you may find that even if you are connecting to the same host the connection does not resume. This is a flaw in the SSL session protocol — though it has been resolved inTLS 1.3, the lack of widespread adoption of the new protocol prevents it from being used here. SSL sessions can also expire based on server criteria, which will result in a standard 4-10 second connection.

SSL sessions take a lot of memory to store, so by defaultEthernetSSLClient will only store one at a time. You can change this behavior by adding the following to yourEthernetSSLClient declaration:

// Initialize the SSL client library// Arguments: EthernetClient, our trust anchorsEthernetClient    client;EthernetSSLClientsslClient(client, TAs, (size_t)TAs_NUM, SomeNumber);

WhereSomeNumber is the number of sessions you would like to store. For example this declaration can store 3 sessions:

EthernetClient    client;EthernetSSLClientsslClient(client, TAs, (size_t)TAs_NUM, 3);

Sessions are managed internally using theSSLSession::getSession function. This function will cycle through sessions in a rotating order, allowing the session cache to continually overwrite old sessions. In general, it is a good idea to use a SessionCache size equal to the number of domains you plan on connecting to.

If you need to clear a session, you can do so using theSSLSession::removeSession function.

As ofv1.6.0,EthernetSSLClient supportsmutual TLS authentication. mTLS is a variant of TLS that verifies both the server and device identities before a connection, and is commonly used in IoT protocols as a secure layer (MQTT over TLS, HTTPS over TLS, etc.).

To usemTLS with SSLClient you will need to a client certificate and client private key associated with the server you are attempting to connect to.

Depending on your use case, you will either generate these yourself (ex.Mosquito MQTT setup), or have them generated for you (ex.AWS IoT Certificate Generation). Given this cryptographic information, you can modify the standardEthernetSSLClient connection sketch to enablemTLS authentication:

.../* Somewhere above setup()*/// The client certificate, can be PEM or DER format// DER format will be an array of raw bytes, and PEM format will be a string// PEM format is shown belowconstchar my_cert[] ="-----BEGIN CERTIFICATE-----\n""MIIDpDCCAowCCQC7mCk5Iu3YmDANBgkqhkiG9w0BAQUFADCBkzELMAkGA1UEBhMC\n"..."-----END CERTIFICATE-----\n";// The client private key, must be the same format as the client certificate// Both RSA and ECC are supported, ECC is shown belowconstchar my_key[] ="-----BEGIN EC PRIVATE KEY-----\n"..."-----END EC PRIVATE KEY-----\n";// This line will parse and store the above information so SSLClient can use it later// Replace `fromPEM` with `fromDER` if you are using DER formatted certificates.SSLClientParametersmTLS = SSLClientParameters::fromPEM(my_cert,sizeof(cert), my_key,sizeof(key));EthernetSSLClientmy_client(...);...voidsetup() {    .../* Before SSLClient connects*/    my_client.setMutualAuthParams(mTLS);    ...}...

The client certificate must be formatted correctly (according toBearSSL's specification) in order for mTLS to work. If the certificate is improperly formatted, SSLClient will attempt to make a regular TLS connection instead of an mTLS one, and fail to connect as a result. Because of this, if you are seeing errors similar to"peer did not send certificate chain" on your server, check that your certificate and key are formatted correctly (seeMQTT SSL possible?). For more information on SSLClient's mTLS functionality, please see theSSLClientParameters documentation.

Note that both the above client certificate informationas well as the correct trust anchors associated with the server are needed for the connection to succeed. Trust anchors will typically be generated from the CA used to generate the server certificate. More information on generating trust anchors can be found inTrustAnchors.md.

Some ideas that didn't quite fit in the API documentation.

The SSL protocol requires thatEthernetSSLClient generate some random bits before connecting with a server.BearSSL provides a random number generator but requires asome entropy for a seed. Normally this seed is generated by taking the microsecond time using the internal clock, however since most microcontrollers are not build with this feature another source must be found.

EthernetSSLClient usesBearSSL'sminimal x509 verification engine to verify the certificate of anSSL connection. This engine requires the developer create a trust anchor array using values stored in trusted root certificates. Check outTrustAnchors document for more details on this component ofEthernetSSLClient.

BearSSL also features aknown certificate validation engine, which only allows for a single domain in exchange for a significantly reduced resource usage (flash and CPU time). This functionality is planned to be implemented in the future.

TheSSL protocol recommends a device support many different encryption algorithms, as well as protocols forSSL itself. The complexity of both of those components results in many medium sized components forming an extremely large whole. Additionally, most embedded processors lack the sophisticated math hardware commonly found in a modern CPU, and as a result require more instructions to create the encryption algorithms SSL requires. This not only increases size but makes the algorithms slow and memory intensive.

If flash footprint is becoming a problem, there are numerous debugging strings (~3kb estimated) that can be removed fromSSLClient.h andSSLClient.cpp.

SSL is a buffered protocol, and since most microcontrollers have limited resources (seeResources),EthernetSSLClient is limited in the size of its buffers. A common problem encountered withSSL connections is buffer overflow, caused by the server sending too much data at once. This problem is caused by the microcontroller being unable to copy and decrypt data faster than it is being received, forcing some data to be discarded. This usually putsBearSSL in an unrecoverable state, forcingEthernetSSLClient to close the connection with a write error. If you are experiencing frequent timeout problems, this could be the reason why.

In order to remedy this problem, the device must be able to read the data faster than it is being received, or alternatively have a cache large enough to store the entire payload. SinceSSL's encryption forces the device to read slowly, this means we must increase the cache size. Depending on your platform, there are a number of ways this can be done:

• Sometimes your communication shield will have an internal buffer, which can be expanded through the driver code. This is the case with the Arduino Ethernet library (in the form of theMAX_SOCK_NUM andETHERNET_LARGE_BUFFERS macros), however the library must be modified for the change to take effect.
• EthernetSSLClient has an internal buffer EthernetSSLClient::m_iobuf, which can be expanded.BearSSL limits the amount of data that can be processed based on the stage in the SSL handshake, and so this will change will have limited usefulness.
• In some cases, a website will send so much data that even with the above solutions,EthernetSSLClient will be unable to keep up (a website with a lot of HTML is an example). In these cases you will have to find another method of retrieving the data you need.
• If none of the above are viable, it is possible to implement your own Client class which has an internal buffer much larger than both the driver andBearSSL. This would require in-depth knowledge of programming and the communication shield you are working with, as well as a microcontroller with a significant amount of RAM.

By default,EthernetSSLClient supports only TLS1.2 and the ciphers listed inTLS12_only_profile.c undersuites[], and the list is relatively small to keep the connection secure and the flash footprint down. These ciphers should work for most applications, however if for some reason you would like to use an older version of TLS or a different cipher, you can change the BearSSL profile being used by SSLClient to analternate one with support for older protocols. To do this, editEthernetSSLClient::EthernetSSLClient to change these lines:

br_client_init_TLS12_only(&m_sslctx, &m_x509ctx, m_trust_anchors, m_trust_anchors_num);// comment the above line and uncomment the line below if you're having trouble connecting over SSL// br_ssl_client_init_full(&m_sslctx, &m_x509ctx, m_trust_anchors, m_trust_anchors_num);

to this:

// br_client_init_TLS12_only(&m_sslctx, &m_x509ctx, m_trust_anchors, m_trust_anchors_num);// comment the above line and uncomment the line below if you're having trouble connecting over SSLbr_ssl_client_init_full(&m_sslctx, &m_x509ctx, m_trust_anchors, m_trust_anchors_num);

If for some unfortunate reason you need SSL 3.0 or SSL 2.0, you will need to modify the BearSSL profile to enable support. Check out theBearSSL profiles documentation and I wish you the best of luck.

• In some drivers (Ethernet), calls toClient::flush will hang if internet is available but there is no route to the destination. Unfortunately SSLClient cannot correct for this without modifying the driver itself, and as a result the recommended solution is ensuring you choose a driver with built-in timeouts to prevent freezing. CheckCalls to stop before connected cause lockups..

• When using PubSubClient on the ESP32, a stack overflow will occur if the user does not flush the buffer immediately after writing. The cause of this issue is under active investigation. More information in issuePubSubClient on ESP32 overflows the stack.

1. AdvancedWebServer
2. HelloServer
3. HelloServer2
4. HttpBasicAuth
5. MQTTClient_Auth
6. MQTTClient_Basic
7. MQTTClient_SSL
8. MQTTClient_SSL_Auth
9. MQTTClient_SSL_Complex
10. PostServer
11. SimpleAuthentication
12. UdpNTPClient
13. UdpSendReceive
14. WebClient
15. WebClientMulti_SSL
16. WebClientRepeating
17. WebClient_SSL
18. WebServer
19. MQTTS_ThingStream.
20. MQTT_ThingStream.
21. AdvancedWebServer_NativeEthernet.
22. WebClientMulti_SSL_NativeEthernet.
23. AWS_IoT.New
24. multiFileProjectNew

1. BasicAuthGet
2. CustomHeader
3. DweetGet
4. DweetPost
5. HueBlink
6. node_test_server
7. PostWithHeaders
8. SimpleDelete
9. SimpleGet
10. SimpleHTTPExample
11. SimplePost
12. SimplePut
13. SimpleWebSocket

1. AdvancedWebServer_QNEthernet
2. MQTTClient_SSL
3. MQTTClient_SSL_Auth
4. MQTTClient_SSL_Complex
5. MQTTS_ThingStream
6. WebClientMulti_SSL
7. WebClient_SSL

1. AdvancedWebServer_RP2040_SPI1New
2. AdvancedWebServer_Teensy4x_SPI1New