Page History

...

At this point, all MQTT clients can now connect over TLS enabled connections.  Note the new port of 8883.  If using a certificate signed by a publicly trusted CA, the clients don't have to make any modifications to their list of trusted root certificates.  If using a self-signed certificate there are a few couple options:

• The root CA cert can be added to the Operation System's list of trusted root certificates
  • This means the application doesn't need to handle special cases and(i.e. modifications to the Java Truststore)
• The client side application can be modified to load the root CA certificate to validate the server certificate against
  • This doesn't require OS changes