Error when setting up openmqtt gateway with a broker with ssl

Theengs OpenMQTTGateway
1

Hi there i’m really going crazy not understanding why my openmqtt gateway build is not connection with my broker using ssl. I’m having 0 issues with an uncrypted broker.
Here’s my build config:

[env:esp32dev-ble]
platform = ${com.esp32_platform}
board = esp32dev
extra_scripts = ${com-esp32.extra_scripts}
board_build.partitions = min_spiffs.csv
lib_deps =
  ${com-esp32.lib_deps}
  ${libraries.ble}
  ${libraries.decoder}
build_flags =
  ${com-esp32.build_flags}
  '-DZgatewayBT="BT"'
  '-DLED_PIN=2'
  '-DLED_PIN_ON=0'
  '-DGateway_Name="OMG_ESP32_BLE"'
  '-DESPWifiManualSetup="true"'
  '-Dwifi_ssid="***"'
  '-Dwifi_password="***"'
  '-DMQTT_SERVER="*.*.*.*"'
  '-DMQTT_PORT="8883"'
  '-DMQTT_USER=""'
  '-DMQTT_PASS=""'
  '-DMQTT_SECURE_SELF_SIGNED=true'
  '-DMQTT_CERT_VALIDATE_DEFAULT=false'
  '-DMQTT_SECURE_SIGNED_CLIENT=true'
  '-DMQTT_SECURE_DEFAULT=true'
custom_description = Regular BLE gateway with adaptive scanning activated, automatically adapts the scan parameters depending on your devices

I’ve placed my certs and key in default_client_cert.h (with -----BEGIN PRIVATE KEY----- end -----END PRIVATE KEY-----) and default_client_key.h.
And as you can see from building flags i gave disabled cert validation.

Still can’t get it to connect. Logs keeps saying:
W: failure_number_mqtt: 2 (x time of reconecting)
W: failed, ssl error code=-30592

I found very unpractical that client certificates cannot be uploaded via web interface.
The only way i found to make it work is through a mqtt bridge which then forwards data to my ssl protected broker.

Thanks in advance to anyone with any idea about trying to make it working.

2

Hello,

I wrote this a few weeks ago, there is no certificate validation but it could be a first step in your configuration:

3

Hi
i already have a mqtt broker correctly set up with ssl, and i’m using it with multiple devices like shellies.
But with openmqttgateway it won’t connect with the configuration listed in first post.