MqttClient asks for private key

[georgemakrakis]

Hello,

I have the following bug, when trying to connect to a mosquitto broker on a server using the following options, i get the following error about the Private Key, but i am using the server,crt to authenticate which has no private key assigned.

Code:

Error

Any help will be appreciated, thanks!

[ralsu091]

The error is not related to this library, you will probably need to have the private key of the certificate.

[georgemakrakis]

Well i think is not possible to have the server's certificate private key, due to security reasons.

[ralsu091]

You are not supposed to use the server certificate as your client certificate!

…

On Tue, Jul 24, 2018 at 11:01 AM George Makrakis ***@***.***> wrote: Well i think is not possible to have the server's certificate private key, due to security reasons. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#377 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AFJO-63pADh1oYf21WXOo95-CsmoMpqMks5uJzbAgaJpZM4Vc28u> .

[ralsu091]

Are you trying to verify the server certificate? or use this certificate to connect with the broker?

[georgemakrakis]

Yes i am trying to connect with the broker, the certificate is self-signed by the ca.crt which actually is the server.

[ralsu091]

You need a different certificate for the client connection. I suggest posting a question on StackOverflow to get better answers.

Good luck!

[georgemakrakis]

I also tried to use client certificates made with OpenSSL including their private key too but the error keeps up.

[lore4]

Hey @georgemakrakis , it seems that you should create a pkcs12 file (as stated in #202). This pkcs12 has to include: server certificate, CA certificate, and client/private key. However, I am experiencing still some issue to complete the connection with TLS.

Did you solve your issue?

[georgemakrakis]

Hello @lore4, no i have changed the entire architecture and design of the solution i wanted to implement. I have wrote some custom connection using web-socket for this. I have also tried to create the pkcs12 file with all the files included but then the program told be that i couldn't verify the server certificate even if i have added the property to do it (.WithTls(true,....), so i abandoned the use of this package for my project.

[lore4]

Hi @georgemakrakis ,
ouch... it seems that it won't be cool for me :-(
Thank you for your answer! ;-)