# MQTT | TLS version: v1.2 (TLS mandatory with CA signed server certificate)
**URL:** https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872
**Category:** General
**Created:** [17 November 2021 07:55 UTC](https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872 "2021-11-17T07:55:59Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@AYo](https://discourse.nodered.org/u/AYo)
#### Post date: [17 November 2021 07:55 UTC](https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872/1 "2021-11-17T07:55:59Z")
Hi Buddies,
good day !
i am trying to connect to a secure port MQTT Broker and from the documentation, it says
```auto
TLS version: v1.2 (TLS mandatory with CA signed server certificate)
```
i have been wondering how to connect with Node red to publish my data.
Thanks greatly for your quick feeback.
---
### Author:  [@hardillb](https://discourse.nodered.org/u/hardillb)
#### Post date: [17 November 2021 08:04 UTC](https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872/2 "2021-11-17T08:04:02Z")
What have you tried and how did it fail?
---
### Author:  [@AYo](https://discourse.nodered.org/u/AYo)
#### Post date: [17 November 2021 08:18 UTC](https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872/3 "2021-11-17T08:18:08Z")
thanks greatly @hardillb
i have not try anything when i clicked use TLS
i don't know what to insert in the property
---
### Author:  [@AYo](https://discourse.nodered.org/u/AYo)
#### Post date: [17 November 2021 08:29 UTC](https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872/4 "2021-11-17T08:29:42Z")
> [@AYo](#):
>
> `TLS mandatory with CA signed server certificate`
thanks @hardillb
i found some documentation online on node -red TLS it seems to work and get connected, stil running a test.
thanks
---
### Author:  [@AYo](https://discourse.nodered.org/u/AYo)
#### Post date: [17 November 2021 08:39 UTC](https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872/5 "2021-11-17T08:39:22Z")
Hi @hardillb
it is not working !
this is the error i am getting
```auto
Error: ENOENT: no such file or directory, open 'cafile /etc/ssl/certs/DST_Root_CA_X3.pem'
thanks for your help
```
---
### Author:  [@hardillb](https://discourse.nodered.org/u/hardillb)
#### Post date: [17 November 2021 08:56 UTC](https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872/6 "2021-11-17T08:56:22Z")
First you shouldn't need to enter anything in the TLS Config node if the Brokers certificate is signed by a public CA.
Secondly the TLS Config node supports 2 modes
1. File path mode, where the path you enter has to point to a file on the machine the Node-RED backend is running. This may not be the same as where the editor is running in the browser
2. Upload mode, where you upload the certificate file from the machine with the editor.
The error implies you have provided a file path from your editor machine and it can't be found on the machine running the backend.
It's also worth noting that by default NodeJS applications don't need to be passed Public CA files as it has a built in Certificate Store.
---
### Author:  [@AYo](https://discourse.nodered.org/u/AYo)
#### Post date: [17 November 2021 09:24 UTC](https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872/7 "2021-11-17T09:24:27Z")
Thanks greatly @hardillb
This help. I am trying to resolve it. Base on this info.
Thanks again !
---
### Author:  [@system](https://discourse.nodered.org/u/system)
#### Post date: [16 January 2022 09:24 UTC](https://discourse.nodered.org/t/mqtt-tls-version-v1-2-tls-mandatory-with-ca-signed-server-certificate/53872/8 "2022-01-16T09:24:30Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.