Configuring TLS transport security in Mosquitto

Now, we will configure Mosquitto to use TLS transport security and work with encrypted communications with different clients. Note that we haven't generated certificates for the clients, and therefore, we won't use client certificates for authentication. This way, any client that has the ca.crt file will be able to establish a communication with the Mosquitto server.

Go to the Mosquitto installation directory and create a new subdirectory named certificates. In Windows, you will need administrator privileges to access the default installation folder.

Copy the following files from the certificates directory, in which we have saved the certificate authority certificate and the server certificate, to the certificates subdirectory we recently created within the Mosquitto installation directory:

• ca.crt
• server.crt
• server.key

In case you are running the Mosquitto server in a Terminal window in macOS or Linux, press Ctrl + C to stop it. In Windows...