Allow SSL/TLS negotiation?

[ralight]

migrated from Bugzilla #432080
status RESOLVED severity normal in component Mosquitto for 1.4
Reported in version unspecified on platform All
Assigned to: Roger Light

On 2014-04-05 08:24:27 -0400, Nicholas Humfrey wrote:

At the moment you must configure mosquitto to use a specific version of TLS, otherwise it will use the latest version of TLS available (and not accept any other versions). This means that you must communicate (out of band) to clients the version of TLS that must be used, making configuration more complex.

This is not a problem in web browsers - surely there is a way that clients and servers can automatically use the latest version of TLS that they both support?

It took me quite a long time to get my Ruby TLS client working; mainly because of the obscure messages that OpenSSL reports when there is a problem.

On 2014-05-24 18:19:36 -0400, Roger Light wrote:

Turns out this is a lot easier than I thought. The problem was with the openssl docs not mentioning this is how it worked.

The default based on this commit is to accept TLS v1.2, v1.1 and v1.0. You can still specify a version to use if you wish.

http:https://git.eclipse.org/c/mosquitto/org.eclipse.mosquitto.git/commit/?id=SHA: 933dc09