Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding TLS to MQTT server #1457

Open
wants to merge 21 commits into
base: master
Choose a base branch
from
Open

Adding TLS to MQTT server #1457

wants to merge 21 commits into from

Conversation

nufke
Copy link
Contributor

@nufke nufke commented Sep 30, 2023

implementation for #1379

Support TLS for MQTT ports and websocket ports. This capability is required to support secure MQTT communication to enable the use of a Progressive Web App (PWA).

This PR also includes updates to the underlying infrastructure to make new certificates for mosquitto (part of update_v3.0.0.7.pl)

PR has been tested successfully using DietPi + LoxBerry on virtualboxVM using v3.0.06.

@Noschvie
Copy link

Hello
Which type of certificates are created for the MQTT server, key type RSA or ECDSA?
Thanks!

@nufke
Copy link
Contributor Author

nufke commented Dec 31, 2023

Default openssl configuration is used, which creates a 2048 bit RSA key. Any specific reason why we need to consider something different?

@Noschvie
Copy link

For Tasmota key type RSA is needed.

@nufke
Copy link
Contributor Author

nufke commented Dec 31, 2023

OK we keep RSA keys then. Note that we sign the MQTT certificates using the existing LoxBerry CA certificates. This means your client device(s) need(s) to have access to a local copy of the CA certificate. So depending on the client, you need to either install the LoxBerry CA certificate or make sure the tool is aware of the CA certificate.

@nufke
Copy link
Contributor Author

nufke commented Jan 1, 2024

See also #1469

NOTE: This PR does not change Loxberry versions in general..json.default yet, which means that the update file update_v3.0.0.7.pl is not called at the end of an update procedure, I've tested locally with a LoxBerry VM on Bullseye on v3.0.0.6, and the update script is working as expected at my end. Also a fresh install using the Loxberry_Installer script should work (here the relevant system updates are already managed by the installer script)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants