Document TLS certificate behaviour when using -p 8883.

This commit is contained in:
Roger A. Light 2021-08-24 23:15:06 +01:00
parent f952d19da1
commit 756b3fcb08
4 changed files with 16 additions and 3 deletions

View File

@ -43,6 +43,7 @@ Client library:
Clients:
- mosquitto_sub and mosquitto_rr now open stdout in binary mode on Windows
so binary payloads are not modified when printing.
- Document TLS certificate behaviour when using `-p 8883`.
Build:
- Fix installation using WITH_TLS=no. Closes #2281.

View File

@ -108,8 +108,12 @@
connections. It is strongly recommended that you use an encrypted
connection for anything more than the most basic setup.</para>
<para>To enable TLS connections when using x509 certificates, one of
either <option>--cafile</option> or <option>--capath</option> must
either <option>--cafile</option> or <option>--capath</option> can
be provided as an option.</para>
<para>Alternatively, if the <option>-p 8883</option> option is used
then the OS provided certificates will be loaded and neither
<option>--cafile</option> or <option>--capath</option> are
needed</para>
<para>To enable TLS connections when using TLS-PSK, you must use the
<option>--psk</option> and the <option>--psk-identity</option>
options.</para>

View File

@ -119,8 +119,12 @@
connections. It is strongly recommended that you use an encrypted
connection for anything more than the most basic setup.</para>
<para>To enable TLS connections when using x509 certificates, one of
either <option>--cafile</option> or <option>--capath</option> must
either <option>--cafile</option> or <option>--capath</option> can
be provided as an option.</para>
<para>Alternatively, if the <option>-p 8883</option> option is used
then the OS provided certificates will be loaded and neither
<option>--cafile</option> or <option>--capath</option> are
needed</para>
<para>To enable TLS connections when using TLS-PSK, you must use the
<option>--psk</option> and the <option>--psk-identity</option>
options.</para>

View File

@ -120,8 +120,12 @@
connections. It is strongly recommended that you use an encrypted
connection for anything more than the most basic setup.</para>
<para>To enable TLS connections when using x509 certificates, one of
either <option>--cafile</option> or <option>--capath</option> must
either <option>--cafile</option> or <option>--capath</option> can
be provided as an option.</para>
<para>Alternatively, if the <option>-p 8883</option> option is used
then the OS provided certificates will be loaded and neither
<option>--cafile</option> or <option>--capath</option> are
needed</para>
<para>To enable TLS connections when using TLS-PSK, you must use the
<option>--psk</option> and the <option>--psk-identity</option>
options.</para>