MQTT TLS Configuration

The options in this section map directly to the paho-mqtt TLS settings, so refer to those for more information.

enabled

Boolean value that enables or disables TLS for the MQTT server connection.

ca_certs

Certificate Authority certificates to use.

certfile

Public certificate to use.

keyfile

Private key to use.

cert_reqs

Defines the certificate requirements that the client imposes on the broker. The default setting is CERT_REQUIRED and the options are:

• CERT_NONE
• CERT_OPTIONAL
• CERT_REQUIRED

tls_version

Specifies the version of the SSL/TLS protocol to be used. By default (if the python version supports it) the highest TLS version is detected. If unavailable, TLS v1 is used.

ciphers

String specifying which encryption ciphers are allowable for this connection.

insecure

Boolean value that enables or disables the verification of the server's TLS certificate. The default, and recommended value is false.