Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FR] Add option to enable insecure TLS #240

Closed
mcesar-rlacruz opened this issue Feb 27, 2024 · 2 comments
Closed

[FR] Add option to enable insecure TLS #240

mcesar-rlacruz opened this issue Feb 27, 2024 · 2 comments

Comments

@mcesar-rlacruz
Copy link
Contributor

mcesar-rlacruz commented Feb 27, 2024

Certificates cannot be issued by CAs to internal IP addresses (192.168.x.x) thus, even if you own your domain, have a valid certificate for it and your MQTT broker uses it, but your router does not support NAT traversal, when accessing the broker from the same internal network via its IP address, TLS will fail as the CN field in the certificate will not match the IP address.

paho-mqtt allows TLS to skip CN verification —client.set_tls_insecure(True)—. A command line option may be added (say -ti/--tls_insecure) enabling this feature.

@mcesar-rlacruz
Copy link
Contributor Author

Pull request created: #241

@koenvervloesem
Copy link
Member

Solved by merging #244

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants