Vernemq MQTT listener using TLS/SSL gives A TLS error occurred.

VerneMQ Forum VerneMQ Questions
,
1

Hi All
I am running VerneMQ on my local server. I use authentication via Auth file and Database. Currently, I have enabled the MQTT listener in VerneMQ, but it is not working. I created an SSL certificate, but it is throwing an error: 'A TLS error occurred

Thanks
Raja

2

Hi,
I suspect your error is coming from “mosquitto_sub”, that is your MQTT client. You might need to point the command to your CA file (--cafile) and use --insecure to disable hostname verification.

Also check the Verne logs for server side log lines. You can also check the running listeners using vmq-admin listener show

3

This is my docker-compose file for vernemq listener

vernemq:
image: erlio/docker-vernemq
container_name: vernemq
restart: always
environment:
DOCKER_VERNEMQ_ACCEPT_EULA: ‘yes’
DOCKER_VERNEMQ_PLUGINS__VMQ_DIVERSITY: ‘on’
DOCKER_VERNEMQ_PLUGINS__VMQ_PASSWD: ‘off’
DOCKER_VERNEMQ_LISTENER__SSL__DEFAULT: ‘0.0.0.0:8883’
DOCKER_VERNEMQ_LISTENER__SSL__ALLOWED_PROTOCOL_VERSIONS: ‘3,4,5’
DOCKER_VERNEMQ_LISTENER__SSL__CAFILE: ‘/etc/vernemq/vernemq_ca.crt’
DOCKER_VERNEMQ_LISTENER__SSL__CERTFILE: ‘/etc/vernemq/vernemq.crt’
DOCKER_VERNEMQ_LISTENER__SSL__KEYFILE: ‘/etc/vernemq/vernemq.key’
DOCKER_VERNEMQ_LISTENER__SSL__REQUIRE_CERTIFICATE: ‘on’
DOCKER_VERNEMQ_LISTENER__SSL__TLS_VERSION: ‘tlsv1.2’
ports:
- “1883:1883”
- “8888:8888”
- “8883:8883”
expose:
- 1883
volumes:
- /etc/vernemq/ver.acl
- /etc/vernemq/vernemq_ca.crt
- /etc/vernemq/vernemq.crt
- /etc/vernemq/vernemq.key

I am running the command ‘vmq-admin listener show,’ but it shows that all ports are working

4

You are using a very old repo (erlio/docker-vernemq).
While I don’t recall TLS not working with that, you should use the newer images from vernemq/vernemq.

(Note that those images need a paid subscription for commercial use.)

5

Could you please share some documentation for the MQTT listener in the Vernemq Docker Compose file?

6

I use updated version image it also getting same error
image: vernemq/vernemq

OpenSSL Error[0]: error:0A000126:SSL routines::unexpected eof while reading
Unable to connect (A TLS error occurred.

7

My suggestion is still to check the VerneMQ logs. There’s probably an exception logged there.