MQTT | TLS version: v1.2 (TLS mandatory with CA signed server certificate)

[AYo]

Hi Buddies,

good day !
i am trying to connect to a secure port MQTT Broker and from the documentation, it says

TLS version: v1.2 (TLS mandatory with CA signed server certificate)

i have been wondering how to connect with Node red to publish my data.

Thanks greatly for your quick feeback.

[hardillb]

What have you tried and how did it fail?

[AYo]

thanks greatly @hardillb

i have not try anything when i clicked use TLS

i don't know what to insert in the property

[AYo]

@AYo

TLS mandatory with CA signed server certificate

thanks @hardillb
i found some documentation online on node -red TLS it seems to work and get connected, stil running a test.
thanks

[AYo]

Hi @hardillb
it is not working !
this is the error i am getting

Error: ENOENT: no such file or directory, open 'cafile   /etc/ssl/certs/DST_Root_CA_X3.pem'

thanks for your help

[hardillb]

First you shouldn't need to enter anything in the TLS Config node if the Brokers certificate is signed by a public CA.

Secondly the TLS Config node supports 2 modes

1. File path mode, where the path you enter has to point to a file on the machine the Node-RED backend is running. This may not be the same as where the editor is running in the browser
2. Upload mode, where you upload the certificate file from the machine with the editor.

The error implies you have provided a file path from your editor machine and it can't be found on the machine running the backend.

It's also worth noting that by default NodeJS applications don't need to be passed Public CA files as it has a built in Certificate Store.

[AYo]

Thanks greatly @hardillb
This help. I am trying to resolve it. Base on this info.

Thanks again !