[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
[
List Home]
Re: [mosquitto-dev] Mosquitto SSL Error : Unable to connect (A TLS error occurred.)
|
On 04/20/2018 10:37 AM, Cedric VIVES wrote:
Hi,
I have installed a LoRa Server with the following services :
- MQTT Broker (*1.4.15*-0mosquitto1~xenial1)
- LoRa-Server
- LoRa-App-Server
On the other side, A raspberry Pi (with raspbian) send data with the
LoRa-Gateway-Bridge.
When the connection is unencrypted (tcp://@server on the
LoRa-Gateway-Bridge.toml), it works !
However, in ssl :
The client is connected :
/1524211792: New connection from xxx.xxx.xxx.xxx on port 8883.//
//1524211792: New client connected from xxx.xxx.xxx.xxx as
96240ae6-28cb-446c-8dd2-0d2d9f045487 (c1, k30)./
But it the server doesn't receive anything because :
/mosquitto_sub -h FQDN_OF_MY_SERVER -p 8883 -t "#" --cafile
/etc/lora-app-server/certs/CAcert.crt/
Did you recognize the slash (/) after the certificate?
/*=> Unable to connect (A TLS error occurred.)*/
The mosquitto logs shows :
/*1524212646: OpenSSL Error: error:14094418:SSL
routines:ssl3_read_bytes:tlsv1 alert unknown ca*//*
*//*1524212646: OpenSSL Error: error:140940E5:SSL
routines:ssl3_read_bytes:ssl handshake failure*/
For information, it is an official certificate with CN = name of the
FQDN of the server.
When i check it by openssl :
/openssl s_client -connect //FQDN_OF_MY_SERVER//:8883 -CAfile
/etc/lora-gateway-bridge/certs/CECert.crt/
Same here and here it is called CECert.crt with an E?
*/=> Verify return code: 0 (ok)/*
I have seen in the archive that the same problem occured with older
versions but not resolved...have you any advices to fix this issue ?
Thanks.
Regards,
Cédric
--
Cédric VIVES
Pôle Infrastructures Informatiques et Télécommunication
Centre de Services Numériques
Tél. : +33 (0)5 61 55 93 72
cedric.vives@xxxxxxxxxxxxxxxx
INSA Toulouse
135 avenue de Rangueil
31077 Toulouse CEDEX 04
France
www.insa-toulouse.fr
_______________________________________________
mosquitto-dev mailing list
mosquitto-dev@xxxxxxxxxxx
To change your delivery options, retrieve your password, or unsubscribe from this list, visit
https://dev.eclipse.org/mailman/listinfo/mosquitto-dev
--
Stefan May
Department MPS
Deutsches Elektronen-Synchrotron DESY
A Research Centre of the Helmholtz Association
Notkestr. 85, 22607 Hamburg
Phone: +49-40-8998-4636
for guests: Bldg. 30/Rm. 420