i have a domain and i installed cert bot to generate certificates for my domain and i succeeded. i have an ubuntu 20.04 with nginx and a docker-compose that contain a docker for node-red, grafana, influx and mosquitto every thing was working fin until i decided to secure my mosquitto broker with le…

[image] zakariazouaoui: in my dockercompose.yaml i have mapped the port of my mosquitto broker to 8883 Are your certificate files accessible from that broker container? If the file is located at host machine, you need to allow that container to access it.

i thought that was the problem so i copied the certificates to the folder of the mosquitto container and changed /etc/letsencrypt/live/Mydomain.fr/cert.pem with /home/docker/docker-compose/data/mosquitto/certs/ and it didn't work

P.S. if you say the docker keep restarting, do you know what's the error from that container? You can generally view logs of container with docker logs your_container_id or docker-compose logs your_container_id

1603201252: mosquitto version 1.6.12 starting 1603201252: Config loaded from /mosquitto/config/mosquitto.conf. 1603201252: Opening ipv4 listen socket on port 1883. 1603201252: Opening ipv6 listen socket on port 1883. 1603201252: Error: Unable to load CA certificates. Check cafile "/etc/letsencry…

just a remark i have changed the port 8883 with 1883

[image] zakariazouaoui: 1603201252: Error: Unable to load CA certificates. Check cafile "/etc/letsencrypt/live/Mydomaine.com/chain.pem". This means the certificate chain file was not found. Can you share your docker's file commands (how you linked host files to docker container)?

[image] stevenzhu: how you linked host files to docker container this is my docker compose.yaml MyMosquitto: image: eclipse-mosquitto ports: - 60012:8883 restart: always volumes: - ./data/mosquitto/:/mosquitto/config/ networks: network: ipv4_address: 192.171.0.5

[image] zakariazouaoui: ./data/mosquitto/:/mosquitto/config/ I think this is the issue, you are only sharing ./data/mosquitto/. There's definitely a file reference to /etc/letsencrypt/ Do you mind add the below line into volumes and see what will happen? - /etc/letsencrypt/live/Mydomaine.c…

[image] stevenzhu: /etc/letsencrypt/live/Mydomaine.com/:/etc/letsencrypt/live/Mydomaine.com/ even though i changed etc/letsencrypt/live/Mydomaine.com/ in mosquitto.conf with home/docker/docker-compose/dol/data/mosquitto/ and i have always the same problem 1603203106: Error: Unable to load CA…

when i added the line to the volume the logs are 603203266: Config loaded from /mosquitto/config/mosquitto.conf. 1603203266: Opening ipv4 listen socket on port 1883. 1603203266: Opening ipv6 listen socket on port 1883. 1603203266: Error: Unable to load CA certificates. Check cafile "/etc/letsenc…

Mosquitto with letsencrypt certaficat error :connection refused

Help

stevenzhu October 20, 2020, 3:07pm 12

I was looking up error messages and discover this thread, can you double check what user this docker is running?

Topic		Replies	Views
How to get Letsencrypt working with the Mosquitto MTTQ broker Help	8	488	March 17, 2026
Same crtificate for NGINX and MQTT mosquitto Help	10	7085	June 27, 2017
Mosquitto suddenly cannot load certificates Help	93	8443	October 10, 2020
MQTT SSL certificate expired Help	13	6750	October 20, 2021
Certificate verify failed - MQTT Help	9	5938	December 10, 2019

Mosquitto with letsencrypt certaficat error :connection refused

Related topics