-
Notifications
You must be signed in to change notification settings - Fork 27
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Adding TLS to MQTT server #1457
base: master
Are you sure you want to change the base?
Conversation
Hello |
Default openssl configuration is used, which creates a 2048 bit RSA key. Any specific reason why we need to consider something different? |
For Tasmota key type RSA is needed. |
OK we keep RSA keys then. Note that we sign the MQTT certificates using the existing LoxBerry CA certificates. This means your client device(s) need(s) to have access to a local copy of the CA certificate. So depending on the client, you need to either install the LoxBerry CA certificate or make sure the tool is aware of the CA certificate. |
See also #1469 NOTE: This PR does not change Loxberry versions in |
implementation for #1379
Support TLS for MQTT ports and websocket ports. This capability is required to support secure MQTT communication to enable the use of a Progressive Web App (PWA).
This PR also includes updates to the underlying infrastructure to make new certificates for mosquitto (part of update_v3.0.0.7.pl)
PR has been tested successfully using DietPi + LoxBerry on virtualboxVM using v3.0.06.