Hi All I'm trying to configure an MQTT in to use SSL/TLS security. I have created ca, client, and server crt files ca, client, and server key files. We are using a Mosqitto MQTT broker, in which I have changed the conf file to use the above files, and restarted it (service mode) In the Node Re…

Hi Andreas Made the changes to node-red.cmd - still no log files though. Disabled legacy MQTT 3.1 support TLS Config Wasn't using local files, changed it so now we are Specifying a passphrase - as provided one when generating certs Disabled Verify server certs Updated, and deployed. All conne…

Morning Andreas I've configured the logging for Mosquitto. An initial log file attached. mosquittoI.txt (19.5 KB) Looking at it, it looks like I may need to focus on my 'client' device, a BLE Gateway from Minew. Thanks for your help so far, much appreciated Chris

I have seen this (likely) exact issue on the forum about a month ago. Went through a lot of things but never managed to solve it. Let me link it. [image] Scenario with MQTT nodes - No message received on debug node General Hi all, I've build a NODE-RED flow with the foll…

Since you are on windows, should you not use double-backslashes in the paths for certificates etc?

forward slashes work pretty much everywhere in Windows and have done for years.

Morning Chris, The Gateway looks fine (using unsecured port 1883), but the logging is being particularly helpful in saying 1570002289: New connection from 127.0.0.1 on port 8883. 1570002289: Socket error on client <unknown>, disconnecting. when N-R connects :cry: but since you used openssl to ge…

OK, I just saw that the config file attached had single backslashes in the paths and thought that could cause a problem, I might be wrong though

Single backslashes seem to be the norm in the other windows-examples I've seen online, but if the openssl test fails, it's probably worth a try...

Use forward slashes in commands, it saves a lot of hassle. If you do use backslashes on the command line, you have to double them up and put the whole thing in quotes. That is, of course, because a backslash is an escape character for all command line terminals. There are a few older Windows applic…

Andreas Here's the result from the openssl command requested connection.txt (13.6 KB) Chris

Lovely, your mosquitto connection is working just fine. On to Node-RED! Let's get some logs! If you're using pm2 to run node-red, then simply do a pm2 logs command to retrieve the logs. Otherwise if you're following https://nodered.org/docs/getting-started/windows to run on windows, you can see …

MQTT SSL/TLS connection

General

ChrisO 2 October 2019 10:47 18

Hi Andreas
Made the changes to node-red.cmd - still no log files though.
Disabled legacy MQTT 3.1 support

TLS Config

Wasn't using local files, changed it so now we are
Specifying a passphrase - as provided one when generating certs
Disabled Verify server certs

Updated, and deployed.

All connected, instantly.

I do believe you have cracked it.

Thank You so much for all your time and efforts
Chris

Topic		Replies	Views
MQTT - TLS encryption example Share Your Projects security	26	14986	5 December 2019
TLS/SSL encrypt for MQTT General	38	4691	31 August 2020
Node-Red and Mosquitto MQTT Encryption Clarification General	9	3419	3 January 2020
Node-RED mqtt broker mosca secure tls connection issue General	7	2825	25 June 2018
Mosquttio tls works - but nodered needs no certificates? General mqtt	4	278	9 December 2022

MQTT SSL/TLS connection

Related topics