Added SSL/TLS support for mosquitto

api/mosquitto/certs/mosquitto.crt

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

api/mosquitto/certs/mosquitto.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

api/mosquitto/config/mosquitto.conf

@@ -9,4 +9,11 @@ listener 9001
 protocol websockets
 
 allow_anonymous false
-password_file /mosquitto/config/passwords
+password_file /mosquitto/config/passwords
+
+listener 8883
+protocol mqtt
+#cafile /mosquitto/certs/mosquitto.crt  #Optional, for client verification
+certfile /mosquitto/certs/mosquitto.crt
+keyfile /mosquitto/certs/mosquitto.key
+tls_version tlsv1.2

api/mosquitto/config/passwords

@@ -0,0 +1 @@
+rpi:$7$101$BaJjE/upxVJgMCNP$QzEhzyZQzJgaUFAzSoevmwegTBWkxeFTAIXh40TBVy7VEGTk8q0aubWgzhqHjqGA+AwN0jSjRyVoEowZJ9QSuA==

api/mosquitto/log/mosquitto.log

@@ -0,0 +1,24 @@
+1766751873: mosquitto version 2.0.22 starting
+1766751873: Config loaded from /mosquitto/config/mosquitto.conf.
+1766751873: Warning: File /mosquitto/config/passwords has world readable permissions. Future versions will refuse to load this file.
+To fix this, use `chmod 0700 /mosquitto/config/passwords`.
+1766751873: Opening ipv4 listen socket on port 1883.
+1766751873: Opening ipv6 listen socket on port 1883.
+1766751873: Opening websockets listen socket on port 9001.
+1766751873: mosquitto version 2.0.22 running
+1766752088: mosquitto version 2.0.22 terminating
+1766752088: Saving in-memory database to /mosquitto/data//mosquitto.db.
+1766752089: mosquitto version 2.0.22 starting
+1766752089: Config loaded from /mosquitto/config/mosquitto.conf.
+1766752089: Opening ipv4 listen socket on port 1883.
+1766752089: Opening ipv6 listen socket on port 1883.
+1766752089: Opening websockets listen socket on port 9001.
+1766752089: mosquitto version 2.0.22 running
+1766752124: New connection from 172.18.0.1:39692 on port 1883.
+1766752124: Client auto-D9EE31CE-8EE7-274C-A6C2-6C9A254B9A4C disconnected, not authorised.
+1766752138: New connection from 172.18.0.1:42808 on port 1883.
+1766752138: New client connected from 172.18.0.1:42808 as auto-D579FA3E-E74B-F0BC-909C-27A7F304D55A (p2, c1, k60, u'rpi').
+1766752156: New connection from 172.18.0.1:60816 on port 1883.
+1766752156: New client connected from 172.18.0.1:60816 as auto-6747DC9C-65B9-8421-1946-2BEA4E74334D (p2, c1, k60, u'rpi').
+1766752156: Client auto-6747DC9C-65B9-8421-1946-2BEA4E74334D disconnected.
+1766752160: Client auto-D579FA3E-E74B-F0BC-909C-27A7F304D55A disconnected.