[mosquitto-dev] TLS v1.3 for PSK

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

[mosquitto-dev] TLS v1.3 for PSK

From: Per x Johansson <Per.X.Johansson@xxxxxxxx>
Date: Fri, 25 Mar 2022 12:39:57 +0000
Accept-language: en-US, sv-SE
Delivered-to: mosquitto-dev@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/mosquitto-dev/>
List-help: <mailto:mosquitto-dev-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/mosquitto-dev>, <mailto:mosquitto-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/mosquitto-dev>, <mailto:mosquitto-dev-request@eclipse.org?subject=unsubscribe>
Thread-index: AQHYQEVnyzdlnfyPZ0ahLWiAl1lmzQ==
Thread-topic: TLS v1.3 for PSK

After upgrading to mosquitto 2.0.12, we have run into problems with clients not being able to connect to brokers that only accept TLS v1.3 when using PSK. I can see in the change log that the reason for that is this.

"Disable TLS v1.3 when using TLS-PSK, because it isn't correctly configured."

What I would like to understand is what "because it isn't correctly configured" actually means. Is there any way to solve it without running TLS v1.2 on the broker? Does it have any security issues for clients using the 2.0.10 version of mosquitto lib when connection to v1.3 brokers.

Regards,

Per

Follow-Ups:
- Re: [mosquitto-dev] TLS v1.3 for PSK
  - From: Roger Light

Prev by Date: Re: [mosquitto-dev] mosquito - MacBook Pro with M1
Next by Date: Re: [mosquitto-dev] TLS v1.3 for PSK
Previous by thread: [mosquitto-dev] mosquito - MacBook Pro with M1
Next by thread: Re: [mosquitto-dev] TLS v1.3 for PSK
Index(es):
- Date
- Thread

Breadcrumbs