It is good practice to use the highest possible TLS protocol version. By default, a Mosquitto server accepts TLS 1.0, 1.1, and 1.2. If all the clients are capable of working with the highest TLS protocol version supported by Mosquitto, we should force Mosquitto to use only the highest version. This way, we make sure that we won't be vulnerable to attacks on previous TLS versions.
Now, we will make the necessary changes in the configuration file to force the use of TLS 1.2. If you are running the Mosquitto server in a Terminal window in macOS or Linux, press Ctrl + C to stop it. In Windows, stop the appropriate service.
Go to the Mosquitto installation directory and open the mosquitto.conf configuration file.
In macOS, Linux, or Windows, add the following line at the end of the configuration file:
tls_version tlsv1.2
We...
