Package: mosquitto
Version: 2.1.2-3
Severity: minor
Hi
README-letsencrypt.md references a non-existing renewal hook script in
`misc/letsencrypt/mosquitto-copy.sh`.
After some websearch I came up with something like this to deploy the
letsencrypt certificates readable by mosquitto (not fully tested, I'm
still waiting for the first real certificate renewal):
# cat /etc/letsencrypt/renewal-hooks/deploy/mosquitto-copy
#!/bin/sh
set -e
CERT_DIR="/etc/letsencrypt/live/mqtt.example.com"
DEST_DIR="/etc/mosquitto/certs"
install -o mosquitto -g mosquitto -m 0644 \
"$CERT_DIR/fullchain.pem" \
"$DEST_DIR/fullchain.pem"
install -o mosquitto -g mosquitto -m 0600 \
"$CERT_DIR/privkey.pem" \
"$DEST_DIR/privkey.pem"
systemctl reload mosquitto
-- System Information:
Debian Release: forky/sid
APT prefers testing
APT policy: (990, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 7.2.8+deb14-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages mosquitto depends on:
ii libc6 2.43-6
ii libcjson1 1.7.19-2+b1
ii libdlt3 3.0.0-10
ii libedit2 3.1-20260512-1
ii libmicrohttpd12t64 1.0.10-1
ii libmosquitto1 2.1.2-3
ii libpicohttpparser1 1.2+ds-2
ii libsqlite3-0 3.53.4-2
ii libssl3t64 3.6.4-1
ii libsystemd0 262-1
ii libwrap0 7.6.q-37
ii systemd [systemd-sysusers] 262-1
ii sysvinit-utils 3.18-1
mosquitto recommends no packages.
Versions of packages mosquitto suggests:
ii apparmor 4.1.8-2
-- no debconf information
