openssl - MQTT Mosquitto SSL/TLS cannot connect with CA.der but can with CA.pem -


i have simple question hope has simple answer! can connect , publish/subscribe broker using certificate authority in .pem format. example, command:

mosquitto_pub --cafile ca.pem -h www.example.com -p 8883 -t test -u "usr" -p "pw"

is successful. however, when convert ca.pem ca.der using

openssl x509 -in ca.pem -out ca.der -outform der

and use ca.der --cafile error:

unable connect (a tls error occurred.).

i believe conversion correct because if convert ca.der ca2.pem using openssl x509 can connect. guess have set in mosquitto.conf file allow *.der, or similar, cannot find addresses in documentation, or anywhere online. need use .der format because setting mqtt client on ti cc3200 dev board, , ti's api requires certs in .der format.

some additional information in case it's needed

i got ca domain through certbot, , certificate chain looks this:

depth=2 o = digital signature trust co., cn = dst root ca x3 verify return:1 depth=1 c = us, o = let's encrypt, cn = let's encrypt authority x3 verify return:1 depth=0 cn = <www.example.com> verify return:1

mosquitto.conf

allow_anonymous false password_file /etc/mosquitto/passwd  listener 1883 localhost  listener 8883 certfile /etc/letsencrypt/live/<www.example.com>/cert.pem cafile /etc/letsencrypt/live/<www.example.com>/chain.pem keyfile /etc/letsencrypt/live/<www.example.com>/privkey.pem

no, mosquitto supports supplying certificates in pem format, can not use der files.

there nothing have use same format (pem/der) of certificate storage on broker side on client side.


Comments

Post a Comment

Popular posts from this blog

resizing Telegram inline keyboard -

telegram's inline keyboard great feature lots of different use cases. inline buttons added list of items this: inline_keyboard = [[inlinekeyboardbutton(text="button", callback_data="button"), inlinekeyboardbutton(text="reset",callback_data="reset")]] inline_keyboard_markup = inlinekeyboardmarkup(inline_keyboard) update.message.reply_text("hi", reply_markup=inline_keyboard_markup) the above code adds 2 buttons each half width of chat screen. i know the normal keyboard button there resize_keyboard parameter somehow can used. my question is there way resize inline buttons ? example make full width or quarter width. unfortunately, can't now. :( you can suggest @botsupport , might add feature next version.
Read more

command line - How can a Python program background itself? -

consider following python command-line program. doesn't work because incomplete, think illustrates problem: #!/usr/bin/python3 import multiprocessing pool = multiprocessing.pool() task in expensive_iterator_with_user_interaction(): pool.call_async(expensive_computation, (task,)) pool.close() print("dear user, may press ctrl-z , bg script.") pool.join() thus, problem scripts needs user input while it's launching expensive parallel processes. there moment when user interaction not needed anymore. then, ask user background process shell actions. however, can achieved program itself? (side note: core of problem entanglement of user input firing “expensive computations”. therefore, cannot separate both in 2 scripts, , letting 1 spawning other daemon.) the command screen may you. use screen -l create new session , run application. after inputting data, can press " ctrl-a " , press " d " on keyboard detach session. now...
Read more

php - "cURL error 28: Resolving timed out" on Wordpress on Azure App Service on Linux -

Image
my wordpress installation on azure app service on linux using custom docker container has slow response times. pages take around 20-40 seconds load. i have troubleshooting plugin installed indicates problem "curl error 28: resolving timed out after n milliseconds" when making requests following urls https://api.wordpress.org/core/version-check/1.7/ http://api.wordpress.org/core/version-check/1.7/ https://api.wordpress.org/plugins/update-check/1.1/ http://api.wordpress.org/plugins/update-check/1.1/ https://api.wordpress.org/themes/update-check/1.1/ http://api.wordpress.org/themes/update-check/1.1/ curl works fine on scm-site command line. example works ok. curl -x post http://api.wordpress.org/core/version-check/1.7/ edit if ssh container , run php code, works fine. <?php $url = 'http://api.wordpress.org/core/version-check/1.7/'; $fields = array( 'version' => urlencode('4.8.1'), 'php' => urlencode(...
Read more