MQTTtls certificate

TagoIO Devices and Connectors
1

@Marcin Wx

Need to run MQTT with TLS. My MQTT client asks to import a certificate to run TLS. Where to get the certificate from?

2

@Felipe Lima

Hi @nautiner, we don’t support custom certificate yet (it is on our roadmap).

The MQTT certificate is for connection protect only, not for identify device. The certificate will renew once a year, check on your MQTT library to use auto TLS certification connection.

3

@Marcin Wx

Thanks, I need to use mosquito/tls to publish data to tago.io however it fails due to certificate verify error. Where to get the CA file from to enable publishing data with mosquitto_pub? The command I use is as below:

mosquitto_pub -h mqtt.tago.io -p 8883 -u token -P abcdefgf-abc-1234-5678-abcyyyyexxxx -m testmsg -t testtopic -d

I think I need to provide CA file with mosquitto --cafile option. Can you help?

4

Hi!
Do you have any updates on the custom certificate update? Are we still using auto TLS certs?

Thank you.

5

Hi @arturcarvalho

We haven’t implemented custom certificate support for the TagoIO Public Broker, which continues to use well-known CA authorities for auto TLS certificates.

For custom CA certificates or mTLS requirements, you can deploy your own MQTT broker through TagoDeploy. Currently, this requires a TagoDeploy project, but we’re developing a standalone version that will work with standard TagoIO multi-tenant accounts.

You can explore TagoDeploy options here: https://tago.io/deploy
https://community.tago.io/t/tagodeploy-mqtt-broker-service