Re: [mosquitto-dev] Error - Unknown client certificate type

[Roger Light <roger@xxxxxxxxxx>]

Hi Dwayne,

I believe that your certificate must be in DER format to work with the
Java client. It's not something I'm familiar with though.

If they are in PEM format, try:

openssl rsa -in key.pem -outform DER -out keyout.der

Cheers,

Roger



On Wed, Jan 13, 2016 at 10:18 PM, Bradley, Dwayne
<Dwayne.Bradley@xxxxxxxxxxxxxxx> wrote:
> I'm using the latest Paho Java client library, 1.0.2.
>
> I'll check on the openssl command and see what that yields as well.  Hopefully that can point me in the right direction.
>
> Thanks,
> Dwayne
>
>
> -----Original Message-----
> From: mosquitto-dev-bounces@xxxxxxxxxxx [mailto:mosquitto-dev-bounces@xxxxxxxxxxx] On Behalf Of Roger Light
> Sent: Wednesday, January 13, 2016 4:15 PM
> To: General development discussions for the mosquitto project
> Subject: Re: [mosquitto-dev] Error - Unknown client certificate type
>
>
>
> *** Exercise caution. This is an EXTERNAL email. DO NOT open attachments or click links from unknown senders or unexpected email. ***
>
> Hi Dwayne,
>
> Is this your client that is producing the unknown client certificate type error? If so, what client library is it using?
>
> A good place to start with TLS errors is the openssl client. Try:
>
> openssl s_client -connect host:port -CAfile ca.crt -cert client.crt -key client.key
>
> Cheers,
>
> Roger
>
>
>
> On Wed, Jan 13, 2016 at 8:15 PM, Bradley, Dwayne <Dwayne.Bradley@xxxxxxxxxxxxxxx> wrote:
>> I have a MQTT client application using client certificates that is
>> trying to connect to a Mosquitto broker and the following error is being returned:
>>
>>
>>
>> “unknown client certificate type: 64”
>>
>>
>>
>> The version of Mosquitto that I’m trying to connect to is V1.4.7 and
>> is running on a Debian 7 server.  As a test, I have also setup
>> Mosquitto V1.4.7 on my Ubuntu 15.10 laptop and tried to connect there
>> as well but I still get this same error.
>>
>>
>>
>> I also have Mosquitto V1.4.4 running on a Windows 7 laptop and the
>> client application connects just fine there using the exact same certificates.
>>
>>
>>
>> Just for a little more information, I have other applications running
>> on different platforms and they can all connect and publish just fine
>> to Mosquitto on the Debian 7 server.
>>
>>
>>
>> Any help or pointers of what to look for will be much appreciated.
>>
>>
>>
>> Thanks,
>>
>> Dwayne
>>
>>
>>
>>
>> _______________________________________________
>> mosquitto-dev mailing list
>> mosquitto-dev@xxxxxxxxxxx
>> To change your delivery options, retrieve your password, or
>> unsubscribe from this list, visit
>> https://dev.eclipse.org/mailman/listinfo/mosquitto-dev
> _______________________________________________
> mosquitto-dev mailing list
> mosquitto-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from this list, visit https://dev.eclipse.org/mailman/listinfo/mosquitto-dev
> _______________________________________________
> mosquitto-dev mailing list
> mosquitto-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from this list, visit
> https://dev.eclipse.org/mailman/listinfo/mosquitto-dev