Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Verify CA equivalent in the new API #8

Open
alexzaru opened this issue Feb 12, 2024 · 2 comments
Open

Verify CA equivalent in the new API #8

alexzaru opened this issue Feb 12, 2024 · 2 comments
Assignees
Labels
question Further information is requested

Comments

@alexzaru
Copy link

I've noticed that the set_force_verify_ca method, along with other methods, has been removed from the MqttOptions type in the new version. I'm unsure of the equivalent method for set_force_verify_ca in the new version.

In my case, self-signed certificates were used for tests and lower environments, and I need to upgrade to a newer version. I see that I need to use the new ConnectionType::TLS, but I can't find a way to set it to not verify the CA.

Any suggestions how to us thisn ow?

@sigrlami sigrlami self-assigned this Feb 12, 2024
@sigrlami
Copy link
Owner

Yes, rustls is the default now and doesn't support disabling CA verification. See more here: https://docs.rs/rustls/0.22.2/rustls/index.html#rustls-takes-care-of-server-certificate-verification

For dev env, you need proxy CA with the signed root certificate, look for mkcert or openssl on how to create those for localhost.

@sigrlami
Copy link
Owner

I'll update the documentation on a development environment.

@sigrlami sigrlami added the question Further information is requested label Feb 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants