eclipse / mosquitto

Eclipse Mosquitto - An open source MQTT broker
https://mosquitto.org
Other
8.61k stars 2.33k forks source link

Problems with TLS in MQTT bridge function from Eclipse-Mosquitto version 2.0.15 #3031

Open blanpa opened 2 months ago

blanpa commented 2 months ago

Hello, I have noticed a problem with the use of the TLS functionality of the mqtt-bridge functionality. It only works with a bridge under version eclipse-mosquitto:2.0.14. From version 2.0.15 it does not work.

Both brokers are provided using a Docker container and the certificates are self-generated. These work with other services, including MQTT Explorer.

Enclosed are my used mosquitto.conf for main broker and side broker with the bridge.

Main Broker conf (version eclipse-mosquitto:2.0.18):

allow_anonymous true

listener 8884
log_type all

cafile /mosquitto/certs/ca.pem
certfile /mosquitto/certs/server-cert.pem
keyfile /mosquitto/certs/server-key.pem

Sidebroker conf with bridge-functionality:

listener 1883
allow_anonymous true
protocol mqtt

connection iptest
address server:8884
start_type automatic 
bridge_protocol_version mqttv50
bridge_cafile /mosquitto/certs/ca.pem
bridge_certfile /mosquitto/certs/client-cert.pem
bridge_keyfile /mosquitto/certs/client-key.pem

bridge_insecure false
bridge_tls_version tlsv1.1
topic test/# out 0

log_type all