-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
All connections rejected if crlfile is used #2597
Comments
Checking via openssl commandline:
|
Thanks for the report. I haven't been able to reproduce this so far (on Ubuntu 22.04) - I'll see about trying it on Debian 11. |
@FirstWithThisName Please check that all declined certificates have the unique subject property (this is the distinguished name). If CRL contains a certificate with a different serial number but the same subject, then both certificates are considered to be revoked. |
I am using the latest (2.0.14) mosquitto version on debian 11.
I am using certificates for authentication and want to include a crl file.
This is my config /etc/mosquitto/conf.d/my.conf:
When I try to send a message to the server I get this error.
Client
OpenSSL Error[0]: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca
Server
OpenSSL Error[0]: error:1417C086:SSL routines:tls_process_client_certificate:certificate verify failed
When I remove the crlfile line from the config everthing works fine.
This is the content of /etc/mosquitto/my-crlfile
It does not contain any certificates so far, adding on ends up with the same result.
The text was updated successfully, but these errors were encountered: