Re: [mosquitto-dev] SSL3_GET_RECORD:wrong version number

[Roger Light <roger@xxxxxxxxxx>]

Hi Khital,

That's a bit odd. What happens if you connect to the broker using
"openssl s_client -connect host:port -CAfile <cafile>" instead?

Cheers,

Roger



On Fri, Sep 30, 2016 at 10:37 AM, Khitai Pang <khitai.pang@xxxxxxxxxxx> wrote:
> I am using mosquitto broker and client 1.4.10.
>
> After modifying cafile, certfile and keyfile in mosquitto.conf and
> restart the broker, the first mosquitto_sub connection always fails.
>
> $ mosquitto_sub -d -v -h myserver.com -p 8080 --tls-version tlsv1.2
> --cafile /tmp/ca.crt  -i mysub -t mytopic -q 2
> Client mysub sending CONNECT
> Error: A TLS error occurred.
>
> Mosquitto log:
>
> mosquitto[3202]: New client connected from xxx.xxx.xxx.xxx as mysub (c1,
> k60).
> mosquitto[3202]: OpenSSL Error: error:1408F10B:SSL
> routines:SSL3_GET_RECORD:wrong version number
> mosquitto[3202]: Socket error on client mysub, disconnecting.
>
> But the second run of exactly the same mosquitto_sub command line will
> succeed:
>
> Client mysub sending CONNECT
> Client mysub received CONNACK
> Client mysub sending SUBSCRIBE (Mid: 1, Topic: mytopic, QoS: 2)
> Client mysub received SUBACK
> Subscribed (mid: 1): 2
>
> mosquitto[3202]: New connection from xxx.xxx.xxx.xxx on port 8080.
> mosquitto[3202]: New client connected from xxx.xxx.xxx.xxx as mysub (c1,
> k60).
>
> OS is ubuntu 14.04 LTS.
>
>
> Any idea?
>
>
> Thanks
> Khitai
>
> _______________________________________________
> mosquitto-dev mailing list
> mosquitto-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from this list, visit
> https://dev.eclipse.org/mailman/listinfo/mosquitto-dev