Eclipse Community Forums: Mosquitto » Issue in configuring self-signed SSL on Mosquitto 1.3.5

Home » Eclipse Projects » Mosquitto » Issue in configuring self-signed SSL on Mosquitto 1.3.5(Issue in configuring self-signed SSL on Mosquitto 1.3.5)

Show: Today's Messages :: Show Polls :: Message Navigator

Issue in configuring self-signed SSL on Mosquitto 1.3.5 [message #1648083]

Tue, 03 March 2015 19:11

Ravi Gandla

Messages: 2
Registered: March 2015

Junior Member

Hello,

We have followed the blog post & mosquitto doc to create & configure the self-signed certificates on Mosquitto.

Version: mosquitto-1.3.5

After creating the keystore & certificates, getting errors while running the mosquitt.conf file and the error is below:

[root@pettraxappdev mosquitto-1.3.5]# mosquitto -c mosquitto_ssl.conf -v
1425041141: mosquitto version 1.2.3 (build date 2013-12-02 23:34:54+0000) starting
1425041141: Config loaded from mosquitto_ssl.conf.
1425041141: Opening ipv6 listen socket on port 8883.
1425041141: Opening ipv4 listen socket on port 8883.
1425041141: Error: Unable to load CA certificates. Check cafile "/root/Desktop/mosquitto-1.3.5/m2mqtt_ca.crt" and capath "/root/Desktop/mosquitto-1.3.5/".

All the files are exist in the same folder path.

Your help is highly appreciated to resolve this issue.

Regards,
Ravi

Attachment: MQTT SSL.txt
(Size: 3.89KB, Downloaded 263 times)
Attachment: mosquitto_ssl.conf
(Size: 32.42KB, Downloaded 303 times)

Report message to a moderator

Re: Issue in configuring self-signed SSL on Mosquitto 1.3.5 [message #1648373 is a reply to message #1648083]

Tue, 03 March 2015 22:20

Roger Light

Messages: 90
Registered: September 2013

Member

Hi Ravi,

> [root@pettraxappdev mosquitto-1.3.5]# mosquitto -c mosquitto_ssl.conf -v
> 1425041141: mosquitto version 1.2.3 (build date 2013-12-02 23:34:54+0000) starting

One point - you see there the broker reports version 1.2.3, not 1.3.5. Try running it as "./mosquitto -c mosquitto_ssl.conf -v" instead of "mosquitto -c mosquitto_ssl_.conf -v"

On the main point you're asking about, the broker can't access the files you are specifying. I imagine the problem is that the files are in an inaccessible place / have too strict permissions / something like apparmor is forbidding permission to the files. In versions prior to 1.4, the mosquitto user must have the ability to read the files, otherwise it would fail. If you upgrade to 1.4 then the root user permissions are ok.

Cheers,

Roger

Report message to a moderator

Re: Issue in configuring self-signed SSL on Mosquitto 1.3.5 [message #1649666 is a reply to message #1648373]

Wed, 04 March 2015 12:50

Ravi Gandla

Messages: 2
Registered: March 2015

Junior Member

Hi Roger,

Thanks for your response.
Yes, when we check with the support team, the version installed is 1.2..3.
Does it work, if we login as other user, instead of the root with the existing version. ?

We tried to start the mosquitto with the given command, but still its not working. (./mosquitto -c mosquitto_ssl.conf -v).
-bash: ./mosquitto: No such file or directory

This is a linux box.

Best Regards,
Ravi

Report message to a moderator

Re: Issue in configuring self-signed SSL on Mosquitto 1.3.5 [message #1693379 is a reply to message #1649666]

Thu, 23 April 2015 15:27

Roger Light

Messages: 90
Registered: September 2013

Member

Sorry for the late reply, I've not been getting notifications of forum messages.

Running as "./mosquitto ..." assumes that you are in the same directory as the mosquitto binary. I missed that you were in the source root directory. You could try "./src/mosquitto ..."

The point is to make sure that you are running the binary that you have just compiled, not the one that is already on your system.

Report message to a moderator

Previous Topic:	Mosquitto s/w for the solaris version
Next Topic:	Mosquitto server

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Fri Apr 26 03:46:43 GMT 2024

.:: Contact :: Home ::.

Breadcrumbs

Sign up to our Newsletter