How to configure TLS correctly in Mosca #807

Activity

1. HvanTao commented on Nov 22, 2019

   

   HvanTao

   on Nov 22, 2019

   Author

   More actions

   var set = {
   secure: {
   port: 3101,
   keyPath: SECURE_KEY,
   certPath: SECURE_CERT
   },
   }

   Connecting to Server: Hostname: sh.****.com . Port: 3101 . Path: /mqtt . Client ID: hank_79510dddc4fe-491a-ae4a-06660ff0fbbe

   error:Failed to connect AMQJSC0001E Connect timed out.
2. jimmiehansson commented on Dec 3, 2019

   

   jimmiehansson

   on Dec 3, 2019

   More actions

   This could be resolved in NGINX using SSL termination with NGINX as a reverse proxy. You could then upstream the connection to a child over TLS encryption from an exposed port (80|443 -> 3101) See this documentation for more details: https://docs.nginx.com/nginx/admin-guide/security-controls/securing-http-traffic-upstream/