emqx icon indicating copy to clipboard operation
emqx copied to clipboard

配置SSL,8883,单向证书问题

Open gonboy opened this issue 1 year ago • 2 comments

What happened?

# 证书caddy2通过cloudflare 获取的Let's encrypt 证书

#/etc/emqx/emqx.conf
listeners.ssl.default {
    bind = 8883
    ssl_options {
        # example,change host XXX
        certfile = "root/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/xxx.xxx.xxx/xxx.xxx.xxx.crt"
        keyfile = "root/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/xxx.xxx.xxx/xxx.xxx.xxx.key"
        verify = verify_none
        fail_if_no_peer_cert = false
    }
}

What did you expect to happen?

8883端口,MQTTX无法连接

How can we reproduce it (as minimally and precisely as possible)?

No response

Anything else we need to know?

No response

EMQX version

$ ./bin/emqx_ctl broker
sysdescr  : EMQX
version   : 5.7.1
datetime  : 2024-07-14T16:18:13.505806145+08:00
uptime    : 5 minutes, 7 seconds

OS version

# On Linux:
$ cat /etc/os-release
PRETTY_NAME="Debian GNU/Linux 11 (bullseye)"
NAME="Debian GNU/Linux"
VERSION_ID="11"
VERSION="11 (bullseye)"
VERSION_CODENAME=bullseye
ID=debian
HOME_URL="https://www.debian.org/"
SUPPORT_URL="https://www.debian.org/support"
BUG_REPORT_URL="https://bugs.debian.org/"
$ uname -a
Linux 154 5.10.0-8-amd64 #1 SMP Debian 5.10.46-4 (2021-08-03) x86_64 GNU/Linux

Log files

gonboy avatar Jul 14 '24 08:07 gonboy

有客户端和服务器日志吗?

zmstone avatar Jul 14 '24 18:07 zmstone

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar Aug 22 '24 12:08 github-actions[bot]