Docker With TLS MQTT(Integration)

62

Well i can telnet without any issues

63

telnetting from the server is not the same as from within the Chirpstack container though

64

All is working :smiley: seems like i made typo

65

Love to hear it, happy I could help

66

Thanks once again. Might just need your assistance when taking on that tls.

listener 8883 0.0.0.0
cafile /etc/mosquitto/certs/ca.pem
certfile /etc/mosquitto/certs/mqtt-server.pem
keyfile /etc/mosquitto/certs/mqtt-server-key.pem
allow_anonymous false
require_certificate true
use_identity_as_username true
acl_file /etc/mosquitto/acl

I’m abit confused about those directory’s of the certs
and what should docker-compose file part look like for that acl?

67

The guide is written for the Ubuntu install (as are all the rest), in the guide it tells you to create the cert directory (/etc/mosquitto/certs/) and then you can reference it directly in the ACL. Docker adds the extra layer of needing to mount the directories. Since the default mounting for the mosquitto container is:

    volumes:
      - ./configuration/mosquitto/config/:/mosquitto/config/

It mounts everything in ./configuration/mosquitto/config/ directory on the server to /mosquitto/config/ on the container, so if you created a certs folder and acl file in the ./configuration/mosquitto/config/ directory on the server they would be mounted in the container as /mosquitto/config/certs and /mosquitto/config/acl. So your second listener in the mosquitto.conf could be:

listener 8883 0.0.0.0
cafile /mosquitto/config/certs/ca.pem
certfile /mosquitto/config/certs/mqtt-server.pem
keyfile /mosquitto/config/certs/mqtt-server-key.pem
allow_anonymous false
require_certificate true
use_identity_as_username true
acl_file /mosquitto/config/acl

Then no changes would be necessary to the mounting docker-compose.yml, although it would be just as easy to add the acl and certs folder somewhere else on the server and mount it however you like on the container as long as you reference it appropriately in the mosquitto.conf

68

I’m 100% with you now. Wow, I know I’ve thanked you a few times already, but thanks again for all of this. You have truly been so helpful, and I’m very grateful. Not a lot of people are like you. I’m happy to still see that there are people like you out there.

Have a wonderful day and chat soon.:slight_smile:

1 Like
69

I appreciate the kind words, I found much of setting up Chirpstack required reading between the lines of the guides, but I got a fair amount of help from the forums here and I’m happy I can pay it forward.

Also it helps me to brush up on my knowledge by working out others problems, and as I’m making a Chirpstack deployment for my company, it’s a nice distraction from other work.

Have a good one.

1 Like
70

Great to hear hope all works out sure it will!

Same to you!