Skip to content

regression: mosquitto_pub,sub fail @ client hello when PSK TLS used on port 8883 #2152

Closed
@jetpax

Description

@jetpax

tested to mosquitto broker setup for tls - psk from mosquitto_sub version 2.0.9 running on libmosquitto 2.0.9, (with no certificates)

e.g
mosquitto_sub -h -p 8883 -t test --psk-identity --psk

fails at Client Hello, since no pre_shared_key Extension is transmitted to the broker

Using another port, eg 8884, proceeds to server hello and connects as expected
e.g
mosquitto_sub -h -p 8884 -t test --psk-identity --psk

in this case the pre_shared_key Extension is transmitted, which contains the PSK Identity

mosquitto_sub version 1.6.9 running on libmosquitto 1.6.9 connects fine using port 8883

Possibly related to changes in 2.0.0 - 2020-12-03
- The mosquitto_sub, mosquitto_pub, and mosquitto_rr clients will now load OS provided CA certificates by default if -L mqtts://... is used, or if the port is set to 8883 and no other CA certificates are loaded.

mosquitto_pub shows the same failure pattern

Seems like client_shared.c l.1266 should be something like

}else if(cfg->port == 8883 && !cfg->psk){

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions