mirror of
https://github.com/ferdzo/iotDashboard.git
synced 2026-04-05 09:06:26 +00:00
Functioning device manager with renew,revoke, updated model for cert id
This commit is contained in:
32
infrastructure/mosquitto/config/mosquitto.conf
Normal file
32
infrastructure/mosquitto/config/mosquitto.conf
Normal file
@@ -0,0 +1,32 @@
|
||||
# Persistence
|
||||
persistence true
|
||||
persistence_location /mosquitto/data/
|
||||
|
||||
# Logging
|
||||
#log_dest file /mosquitto/log/mosquitto.log
|
||||
|
||||
# Standard MQTT listener (for testing without certs)
|
||||
listener 1883
|
||||
allow_anonymous true
|
||||
|
||||
# mTLS listener (requires client certificates)
|
||||
listener 8883
|
||||
allow_anonymous true
|
||||
protocol mqtt
|
||||
|
||||
# Server certificates (mosquitto's identity)
|
||||
certfile /mosquitto/certs/server.crt
|
||||
keyfile /mosquitto/certs/server.key
|
||||
|
||||
# CA certificate to verify client certificates
|
||||
cafile /mosquitto/certs/ca.crt
|
||||
|
||||
# CRL file
|
||||
crlfile /mosquitto/certs/ca.crl
|
||||
|
||||
# Certificate-based authentication
|
||||
require_certificate true
|
||||
use_identity_as_username true
|
||||
|
||||
# TLS version restrictions
|
||||
tls_version tlsv1.2
|
||||
Reference in New Issue
Block a user