TLS Support with Trusted Server Certificate about cocoamqtt HOT 5 OPEN

I am also interested in this 🙏

from cocoamqtt.

@JaylinYu Please correct me if i state something incorrect. I would like a statement in any way on this. TLS/encrypted transmissions on the internet are very important. If this library does not support TLS secured transmissions with certificate authentication, i think this should be stated clearly

from cocoamqtt.

@savejeff someone on their slack pointed me to this test that seems like it will help.

Have you been able to get subscriptions working? it seems like once I try to .subscribe I get disconnected with not much of a useful error message.

from cocoamqtt.

Ok it was somewhat buried but I found that you need to implement the following:

  func mqtt5(_ mqtt: CocoaMQTT5, didReceive trust: SecTrust, completionHandler: @escaping (Bool) -> Void) {
     // TODO: Some validation
     completionHandler(true)
  }

The wrinkle I am struggling with is it seems to require that I use the same Intermediate CA for the server & my Users. I am hoping to use unique CA's for each that have the same Root CA. Otherwise I get Code=-9831 unknown Cert Authority

from cocoamqtt.

@savejeff someone on their slack pointed me to this test that seems like it will help.

CocoaMQTT/CocoaMQTTTests/CocoaMQTTTests.swift

Line 298 in ff7c07b

func testTwoWaySLL() {

Have you been able to get subscriptions working? it seems like once I try to .subscribe I get disconnected with not much of a useful error message.

This only describes how client authentication is done. right at the start with mqtt.allowUntrustCACertificate = true all Server certificates are accepted making the connection not secure.

There is still no code example how to give CocoaMQTT a server certificate that is then used to authenticate the broker I'm trying to connect to.

from cocoamqtt.