You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: docs/Self-signed-Mosquitto.md
+6-6
Original file line number
Diff line number
Diff line change
@@ -67,7 +67,7 @@ mv easyrsa tmprsa
67
67
tr -d '\r' <tmprsa >easyrsa
68
68
```
69
69
70
-
#### 1.2. Define your certificate information
70
+
#### 1.2. Define your certificate information
71
71
72
72
The commands below may be copied and pasted into a terminal window, then the resulting file, `vars` edited as appropriate.
73
73
@@ -87,7 +87,7 @@ set_var EASYRSA_DN "org"
87
87
88
88
# Organizational fields (used with 'org' mode and ignored in 'cn_only' mode.)
89
89
# These are the default values for fields which will be placed in the
90
-
# certificate. Don't leave any of these fields blank, although interactively
90
+
# certificate. Don't leave any of these fields blank, although interactively
91
91
# you may omit any specific field by typing the "." symbol (not valid for
92
92
# email.)
93
93
@@ -98,7 +98,7 @@ set_var EASYRSA_REQ_ORG "myorg"
98
98
set_var EASYRSA_REQ_EMAIL "info@myorg.com"
99
99
set_var EASYRSA_REQ_OU "MQTT"
100
100
101
-
# Choose a size in bits for your keypairs. The recommended value is 2048. Using
101
+
# Choose a size in bits for your keypairs. The recommended value is 2048. Using
102
102
# 2048-bit keys is considered more than sufficient for many years into the
103
103
# future. Larger keysizes will slow down TLS negotiation and make key/DH param
104
104
# generation take much longer. Values up to 4096 should be accepted by most
@@ -208,7 +208,7 @@ Add the following to `user_config_override.h`:
208
208
```
209
209
#ifndef USE_MQTT_TLS
210
210
#define USE_MQTT_TLS
211
-
// #define USE_MQTT_TLS_CA_CERT // Force full CA validation instead of fingerprints, slower, but simpler to use. (+2.2k code, +1.9k mem during connection handshake)
211
+
// #define USE_MQTT_TLS_CA_CERT // Force full CA validation instead of fingerprints, slower, but simpler to use. (+2.2k code, +1.9k mem during connection handshake)
212
212
#define USE_MQTT_AWS_IOT // This includes the LetsEncrypt CA in tasmota_ca.ino for verifying server certificates
213
213
#define USE_MQTT_TLS_FORCE_EC_CIPHER // Force Elliptic Curve cipher (higher security) required by some servers (automatically enabled with USE_MQTT_AWS_IOT) (+11.4k code, +0.4k mem)
@@ -221,7 +221,7 @@ Add the following to `user_config_override.h`:
221
221
```
222
222
#ifndef USE_MQTT_TLS
223
223
#define USE_MQTT_TLS
224
-
#define USE_MQTT_TLS_CA_CERT // Force full CA validation instead of fingerprints, slower, but simpler to use. (+2.2k code, +1.9k mem during connection handshake)
224
+
#define USE_MQTT_TLS_CA_CERT // Force full CA validation instead of fingerprints, slower, but simpler to use. (+2.2k code, +1.9k mem during connection handshake)
225
225
#define USE_MQTT_AWS_IOT // This will include LetsEncrypt CA, as well as our CA, in tasmota_ca.ino for verifying server certificates
226
226
#define USE_MQTT_TLS_FORCE_EC_CIPHER // Force Elliptic Curve cipher (higher security) required by some servers (automatically enabled with USE_MQTT_AWS_IOT) (+11.4k code, +0.4k mem)
227
227
#define INCLUDE_LOCAL_CERT
@@ -330,7 +330,7 @@ To start Mosquitto on Windows, either use the services snap-in (`services.msc`),
330
330
net start mosquitto
331
331
```
332
332
333
-
### 6. - Generate and configure certificates for your devices
333
+
### 6. Generate and configure certificates for your devices
334
334
335
335
!!! failure "Repeated step" Repeat the following 6.x steps once for every device, changing tasmota_name for each device. You will be prompted for a private key password for each device.
0 commit comments