Hi,
I’m trying to use MQTTS on my BG95 module.
I use mosquitto as a broker.
On the BG95 module i enabled TLS1.2 and I have seclevel set to 0 (no authentication).
TLS on the broker is also set to v1.2
Sending messages over mqtts works fine for about 7 days.
Then all of a sudden I cannot create a connection to the broker anymore.
On the mosquitto broker I get the following error messages:
2024-11-07T22:00:25: New connection from 3.69.185.69:37442 on port 8883.
2024-11-07T22:00:26: OpenSSL Error[0]: error:1402542E:SSL routines:ACCEPT_SR_CLNT_HELLO:tlsv1 alert protocol version
2024-11-07T22:00:26: Client <unknown> disconnected: Protocol error.
2024-11-07T22:00:27: New connection from 3.69.185.69:37442 on port 8883.
2024-11-07T22:00:28: OpenSSL Error[0]: error:1402542E:SSL routines:ACCEPT_SR_CLNT_HELLO:tlsv1 alert protocol version
2024-11-07T22:00:28: Client <unknown> disconnected: Protocol error.
2024-11-07T22:00:30: New connection from 3.69.185.69:37442 on port 8883.
2024-11-07T22:00:43: OpenSSL Error[0]: error:1402542E:SSL routines:ACCEPT_SR_CLNT_HELLO:tlsv1 alert protocol version
2024-11-07T22:00:43: Client <unknown> disconnected: Protocol error.
2024-11-07T22:00:44: New connection from 3.69.185.69:34716 on port 8883.
2024-11-07T22:00:45: OpenSSL Error[0]: error:1402542E:SSL routines:ACCEPT_SR_CLNT_HELLO:tlsv1 alert protocol version
2024-11-07T22:00:45: Client <unknown> disconnected: Protocol error.
...
My mosquitto.conf file:
persistence true
persistence_location /mosquitto/data/
allow_anonymous true
password_file /mosquitto/config/passwd
# logging
log_type all
log_dest file /mosquitto/log/mosquitto.log
log_timestamp true
log_timestamp_format %Y-%m-%dT%H:%M:%S
listener 1883
listener 8883
# certs are automatically updated using a letsencrypt hook!!!
certfile /mosquitto/config/certs/cert.pem
keyfile /mosquitto/config/certs/server.key
cafile /mosquitto/config/certs/fullchain.pem
tls_version tlsv1.2
I tested this a couple of times and it seems to happen consistently after about 7 days.
Does anyone have any clues on what the problem could be?
Best regards,
eco