Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable subscribe to mosquitto broker using ssl/tls certificates #137

Open
srinivasgbd opened this issue Aug 18, 2023 · 0 comments
Open

Unable subscribe to mosquitto broker using ssl/tls certificates #137

srinivasgbd opened this issue Aug 18, 2023 · 0 comments

Comments

@srinivasgbd
Copy link

Hi, Unable subscribe to mosquitto broker using ssl/tls method. need help config file for SSL/TLS.
below is the sample config file

mqtt:

The MQTT broker to connect to

server: ssl://127.0.0.1:8883

Optional: Username and Password for authenticating with the MQTT Server

user: bob

#password: happylittleclouds

Optional: for TLS client certificates

ca_cert: /etc/mosquitto/certs/server-certs/ca.crt
client_cert: /etc/mosquitto/certs/client-certs/client.crt
client_key: /etc/mosquitto/certs/client-certs/client.key

below ERROR
Aug 18 12:00:40 exp-mongo-v42-arb mosquitto: 1692334840: OpenSSL Error[0]: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate
Aug 18 12:00:40 exp-mongo-v42-arb mosquitto: 1692334840: OpenSSL Error[1]: error:140940E5:SSL routines:ssl3_read_bytes:ssl handshake failure
Aug 18 12:00:40 exp-mongo-v42-arb mosquitto: 1692334840: Socket error on client , disconnecting.
Aug 18 12:00:50 exp-mongo-v42-arb mqtt2prometheus: 2023-08-18T12:00:50+07:00#011warn#011cmd/mqtt2prometheus.go:150#011could not connect to mqtt broker, sleep 10 second#011{"error": "network Error : x509: cannot validate certificate for 127.0.0.1 because it doesn't contain any IP SANs"}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant