Eclipse Community Forums: Mosquitto » Issue in configuring self-signed SSL on Mosquitto 1.3.5

Home » Eclipse Projects » Mosquitto » Issue in configuring self-signed SSL on Mosquitto 1.3.5(Issue in configuring self-signed SSL on Mosquitto 1.3.5)

Issue in configuring self-signed SSL on Mosquitto 1.3.5 [message #1648083]

Tue, 03 March 2015 14:11

Eclipse User

Hello,

We have followed the blog post & mosquitto doc to create & configure the self-signed certificates on Mosquitto.

Version: mosquitto-1.3.5

After creating the keystore & certificates, getting errors while running the mosquitt.conf file and the error is below:

[root@pettraxappdev mosquitto-1.3.5]# mosquitto -c mosquitto_ssl.conf -v
1425041141: mosquitto version 1.2.3 (build date 2013-12-02 23:34:54+0000) starting
1425041141: Config loaded from mosquitto_ssl.conf.
1425041141: Opening ipv6 listen socket on port 8883.
1425041141: Opening ipv4 listen socket on port 8883.
1425041141: Error: Unable to load CA certificates. Check cafile "/root/Desktop/mosquitto-1.3.5/m2mqtt_ca.crt" and capath "/root/Desktop/mosquitto-1.3.5/".

All the files are exist in the same folder path.

Your help is highly appreciated to resolve this issue.

Regards,
Ravi

Attachment: MQTT SSL.txt
(Size: 3.89KB, Downloaded 282 times)
Attachment: mosquitto_ssl.conf
(Size: 32.42KB, Downloaded 329 times)

Re: Issue in configuring self-signed SSL on Mosquitto 1.3.5 [message #1648373 is a reply to message #1648083]

Tue, 03 March 2015 17:20

Eclipse User

Hi Ravi,

> [root@pettraxappdev mosquitto-1.3.5]# mosquitto -c mosquitto_ssl.conf -v
> 1425041141: mosquitto version 1.2.3 (build date 2013-12-02 23:34:54+0000) starting

One point - you see there the broker reports version 1.2.3, not 1.3.5. Try running it as "./mosquitto -c mosquitto_ssl.conf -v" instead of "mosquitto -c mosquitto_ssl_.conf -v"

On the main point you're asking about, the broker can't access the files you are specifying. I imagine the problem is that the files are in an inaccessible place / have too strict permissions / something like apparmor is forbidding permission to the files. In versions prior to 1.4, the mosquitto user must have the ability to read the files, otherwise it would fail. If you upgrade to 1.4 then the root user permissions are ok.

Cheers,

Roger

Re: Issue in configuring self-signed SSL on Mosquitto 1.3.5 [message #1649666 is a reply to message #1648373]

Wed, 04 March 2015 07:50

Eclipse User

Hi Roger,

Thanks for your response.
Yes, when we check with the support team, the version installed is 1.2..3.
Does it work, if we login as other user, instead of the root with the existing version. ?

We tried to start the mosquitto with the given command, but still its not working. (./mosquitto -c mosquitto_ssl.conf -v).
-bash: ./mosquitto: No such file or directory

This is a linux box.

Best Regards,
Ravi

Re: Issue in configuring self-signed SSL on Mosquitto 1.3.5 [message #1693379 is a reply to message #1649666]

Thu, 23 April 2015 11:27

Eclipse User

Sorry for the late reply, I've not been getting notifications of forum messages.

Running as "./mosquitto ..." assumes that you are in the same directory as the mosquitto binary. I missed that you were in the source root directory. You could try "./src/mosquitto ..."

The point is to make sure that you are running the binary that you have just compiled, not the one that is already on your system.

Previous Topic:	Mosquitto s/w for the solaris version
Next Topic:	Mosquitto server

Goto Forum:

-=] Back to Top [=-

Current Time: Thu Jul 03 18:33:36 EDT 2025

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter