mosquitto-tls man page

mosquitto-tls — Configure SSL/TLS support for Mosquitto

Description

mosquitto provides SSL support for encrypted network connections and authentication. This manual describes how to create the files needed.

Note

It is important to use different certificate subject parameters for your CA, server and clients. If the certificates appear identical, even though generated separately, the broker/client will not be able to distinguish between them and you will experience difficult to diagnose errors.

Certificate Authority

Generate a certificate authority certificate and key.

Server

Generate a server key.

· openssl genrsa -des3 -out server.key 2048

Generate a server key without encryption.

· openssl genrsa -out server.key 2048

Generate a certificate signing request to send to the CA.

· openssl req -out server.csr -key server.key -new

Send the CSR to the CA, or sign it with your CA key:

Client

Generate a client key.

· openssl genrsa -des3 -out client.key 2048

Generate a certificate signing request to send to the CA.

· openssl req -out client.csr -key client.key -new

Send the CSR to the CA, or sign it with your CA key:

See Also

mosquitto(8), mosquitto-conf(5)

Author

Roger Light <roger@atchoo.org>

Referenced By

mosquitto(8), mosquitto.conf(5), mosquitto_pub(1), mosquitto_sub(1).

07/10/2017 Mosquitto Project Conventions and miscellaneous