Step-by-step guide and scripts for setting up TLS/SSL certificates for MQTT Mosquitto broker. Implementing username and password authentication for MQTT clients using Mosquitto.
(You should write the following codes in windows command line)
Generate CA Key and Certificate
openssl genrsa -des3 -out ca.key 2048
openssl req -new -x509 -days 1826 -key ca.key -out ca.crtGenerate Server Key and Certificate
openssl genrsa -out server.key 2048
openssl req -new -out server.csr -key server.key
openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 360Securely Subscribe to a Topic
mosquitto_sub -h "your broker ip" -p 8883 -t test --cafile "C:\Program Files\mosquitto\certs\ca.crt" --tls-version tlsv1.2Securely Publish a Message
mosquitto_pub -h "your broker ip" -p 8883 -t test --cafile "C:\Program Files\mosquitto\certs\ca.crt" --tls-version tlsv1.2 -dopenssl genrsa -out client.key 2048
openssl req -new -out client.csr -key client.key
openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -days 360mosquitto_pub --cafile "C:\Program Files\mosquitto\certs\ca.crt" --cert "C:\Program Files\mosquitto\certs\client.crt" --key "C:\Program Files\mosquitto\certs\client.key" -d -h fekef -p 8883 -t test -m "hello world"Generate Username and Password: First, you must create password folder in C:\Program Files\mosquitto\ then create password.txt.
mosquitto_passwd -c "C:\Program Files\mosquitto\passwords\password.txt" root #Root is the name of user you can do what you want
mosquitto_passwd -D "C:\Program Files\mosquitto\passwords\password.txt" root #To delete a userlistener 8883
per_listener_settings true
password_file C:\Program Files\mosquitto\passwords\password.txt
allow_anonymous false
protocol mqtt
cafile C:\Program Files\mosquitto\certs\ca.crt
certfile C:\Program Files\mosquitto\certs\server.crt
keyfile C:\Program Files\mosquitto\certs\server.key
tls_version tlsv1.2mosquitto -c mosquitto.conf -v
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent