Chapter 2. Securing an MQTT Mosquitto Server
In this chapter, we will secure a Mosquitto server. We will work with digital certificates to encrypt all the data sent between the MQTT clients and the server. To secure the server, we will:
- Generate a private certificate authority to use TLS with Mosquitto
- Create a certificate for the Mosquitto server
- Configure TLS transport security in Mosquitto
- Test the MQTT TLS configuration with MQTT.fx
- Test the MQTT TLS configuration with MQTT-spy
- Create a certificate for each MQTT client
- Configure TLS client certificate authentication in Mosquitto
- Test the MQTT TLS client authentication with MQTT.fx
- Test the MQTT TLS configuration with MQTT-spy
- Force the TLS protocol version
Securing a Mosquitto server
Security for IoT, ...
Get MQTT Essentials - A Lightweight IoT Protocol now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
