maybe i am using different certificates for both - MQTT pub:

        [[[tls]]]
            tls_version = tlsv12
            ca_certs = /etc/ssl/certs/ca-certificates.crt

and what is defined in /etc/mosquitto/conf.d/myconfig.conf 

...
# Insecure mqtt to localhost only, and secure mqtt
listener 1883 localhost
listener 8883
certfile /etc/letsencrypt/live/jastrabie.online/cert.pem
cafile /etc/letsencrypt/live/jastrabie.online/chain.pem
keyfile /etc/letsencrypt/live/jastrabie.online/privkey.pem
protocol mqtt

# websockets
listener 9001
certfile /etc/letsencrypt/live/jastrabie.online/cert.pem
cafile /etc/letsencrypt/live/jastrabie.online/chain.pem
keyfile /etc/letsencrypt/live/jastrabie.online/privkey.pem
protocol websockets

am I right/wrong?
Miso


Dátum: streda 23. decembra 2020, čas: 23:49:18 UTC+1, odosielateľ: miso k

>
> it is FQDN -  jastrabie.online - look at the letter behind B
> so i let the host as it is. 
> is my port correct -9001?
> SSL should be 1 as "On", or should be the TLS protocol version - 1.2, or 
> even 12?
>
>
>     # MQTT Websockets defaults
>     mqtt_websockets_enabled = 1
>     mqtt_websockets_host = "jastrabie.online"
>     mqtt_websockets_port = 9001
>     mqtt_websockets_ssl = 1
>     mqtt_websockets_topic = "weather/loop"
>     disconnect_live_website_visitor = 1800000
>
>
> Dátum: streda 23. decembra 2020, čas: 23:27:40 UTC+1, odosielateľ: vince
>
>> On Wednesday, December 23, 2020 at 2:05:28 PM UTC-8 misk...@gmail.com 
>> wrote:
>>
>>> just to be sure -  server_url = mqtt://pi:password@url:8883/ 
>>> URL can be localhost, or should I use my https:// webpage 
>>> "jastrabie.online"? 
>>>
>>
>> Never localhost
>>
>> Always use the MQTT broker's ip address or hostname or ideally FQDN
>>
>> In your example, 'jastrable.online' hopefully is a fully qualified domain 
>> name, but I've never heard of that domain and it doesn't resolve for me 
>> here.    I'd suggest initially using your MQTT broker system's ip address 
>> there for initial testing to know that the broker config works.  Then move 
>> later to putting in the fully qualified domain name that ip resolves to as 
>> step 2.
>>
>>
>>  
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to weewx-user+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/weewx-user/e0ee582b-db53-425b-95b3-545a092b7f37n%40googlegroups.com.

Reply via email to