# MQTT TLS not working

**URL:** <https://discourse.nodered.org/t/mqtt-tls-not-working/41069>\
**Category:** General\
**Created:** [16 February 2021 08:48 UTC](https://discourse.nodered.org/t/mqtt-tls-not-working/41069 "2021-02-16T08:48:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![torrent](https://avatars.discourse-cdn.com/v4/letter/t/4bbf92/32.png) [@torrent](https://discourse.nodered.org/u/torrent)\
**Post date:** [16 February 2021 08:48 UTC](https://discourse.nodered.org/t/mqtt-tls-not-working/41069/1 "2021-02-16T08:48:16Z")

</div>

I am trying to connect my MQTT TLS Server on Docker locally. But someway, it doesn't work at all. I have configured the server site with this following tutorial:

```auto
http://www.steves-internet-guide.com/mosquitto-tls/
http://www.steves-internet-guide.com/creating-and-using-client-certificates-with-mqtt-and-mosquitto/

```

and this is what I configured in NodeRED:

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/2/e/2ec13ca3bc06bc6df22640bbe36f7e58af3721cd.png)  
 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/c/4/c42b57d2314f48da22eca95f78e03db604b61c34.png)

The Mosquitto configuration file looks like this:

```auto
listener 8883
cafile /home/TLS/ca.crt
certfile /home/TLS/server.crt
keyfile /home/TLS/server.key
require_certificate false 
tls_version tlsv1.2

```

Somehow my flow is always yellows:  
 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/8/0/80c25c0ef5327b9ceb9900a804d356f4bc19042d.png)

Moreover, this is what I got on Docker logs:

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/5/a/5aff70aa750ade346b3cb4b8b3e53af40a72e737.png)

Besides, I have tried with MQTT Broker of Eclipse and it works like a charm!?!

 ![image](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/3X/5/5/55574d954d58c06ab799d53294f7095a61ded1d8.png)

Please give me a hand. Thanks in advance.

---

<div class="post-metadata">

**Author:** ![TotallyInformation](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/totallyinformation/32/31_2.png) [@TotallyInformation](https://discourse.nodered.org/u/TotallyInformation)\
**Post date:** [17 February 2021 00:12 UTC](https://discourse.nodered.org/t/mqtt-tls-not-working/41069/2 "2021-02-17T00:12:36Z")

</div>

There was a thread on this a while back in the forum, you might want to search for it. The answer was fairly involved I seem to remember.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [18 April 2021 00:13 UTC](https://discourse.nodered.org/t/mqtt-tls-not-working/41069/3 "2021-04-18T00:13:08Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.