MQTT Secure Websocket - FATAL Unknown CA

[ThomasB]

Have you modified your script to only pass one parameter (server cert) to tls_set?

Hi,

yes, like this:

mclient = require('mosquitto').new()
mclient:tls_set('/data/ftp/final.pem')
mclient:tls_insecure_set(true)
mclient:login_set('user','pass')


final.pem is the chain you provided with the cert.pem (server certificate)

server supports following ciphers:


| ssl-enum-ciphers:
|  TLSv1.2:
|    ciphers:
|      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (brainpoolP256r1) - A
|      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (brainpoolP256r1) - A
|      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (brainpoolP256r1) - A
|      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (brainpoolP256r1) - A
|      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (brainpoolP256r1) - A
|      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (brainpoolP256r1) - A
|      TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A
|      TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A
|      TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A
|      TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
|      TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A
|      TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A
|    compressors:
|      NULL
|    cipher preference: client
|_  least strength: A