I would like to make OTA updates for the NodeMCU devices. The new Lua files will be uploaded on my website. I want to guarantee that the files are authentic by signing the file using a private key and verifying the file on the ESP8266 using a public key. Or alternatively I could use an HTTPS connection to my website without signing the file itself, the ESP8266 would have just to verify that the server is really my website and not to verify the file itself. Is this possible? does the NodeMCU firmware have an asymmetric encryption feature using public and private keys?
Thanks a lot.