MQTT SSL Support

[noelgeorgi]

@hek @Anticimex is there any way to add SSL support for MQTT client on nodemcu(esp8266). I know that esp8266 supports SSL(from node-mcu custom builds http://nodemcu-build.com/). I am using domoticz as controller and it already has MQTT SSL support. I am planning to run domoticz on my VPS so SSL support for MQTT is required.

[Anticimex]

No idea. I have only looked at security from a node2node node2gw perspective. Not controller2gw. That is too controller specific to be generalized efficiently. But there probably exist ssl libs out there which you could look at.

[noelgeorgi]

Thanks for the reply but the controller already supports ssl, its the mysensors eso8266mqtt client that doesnt support ssl!!! :disappointed_relieved:

[hek]

We're using the pubsubclient library for the MQTT communication:
https://github.com/knolleary/pubsubclient

From what I can tell it doesn't support the WiFiClientSecure at the moment. But I could be wrong.. just did a quick search among their issues on github.

[Anticimex]

@noelgeorgi Yes, but I am not doing controller specific adaptations to the library for signing/encryption. So your ssl feature in your specific gw is specific to you (and all others who happen to need ssl for MQTT).

[noelgeorgi]

Thanks for the fast replies. This is the only forum i have seen with the fastest replies. @hek @Anticimex there really exist an mqtt library for esp8266 supporting SSL, any way to change to this: https://github.com/tuanpmt/esp_mqtt

[hek]

@noelgeorgi said:

https://github.com/tuanpmt/esp_mqtt

Please, go ahead and create your own GatewayTransport variant. Will probably be appreciated by others as well.

[noelgeorgi]

Already work in progress, esp8266 2.1.0 library added support for having ca certificates in SPIFFS memory, not enough documentation on using it....:sweat: :disappointed:
https://github.com/esp8266/Arduino/blob/master/libraries/ESP8266WiFi/src/WiFiClientSecure.h#L52-L66

[jkandasa]

https://github.com/knolleary/pubsubclient will not support for SSL. https://github.com/knolleary/pubsubclient/issues/23

[noelgeorgi]

you just have to change WiFiClient client; to WiFiClientSecure client;

[noelgeorgi]

finally succeeded in implementing ssl for MQTT with esp8266!!!!!!!:smiley: :satisfied: :relaxed: will post in Development...... http://forum.mysensors.org/topic/3385/ssl-support-for-mqtt-on-esp8266

[flip]

Did you have any success to implement SSL support to the mqtt broker?