33 lines
1.4 KiB
Markdown
33 lines
1.4 KiB
Markdown
# MQTT Server
|
|
|
|
MQTT server:
|
|
* mqtts://mqtt-dev-server.westus2-1.ts.eventgrid.azure.net
|
|
* port: 8883
|
|
|
|
# Getting server certificate:
|
|
|
|
openssl s_client -showcerts -connect mqtt-dev-server.westus2-1.ts.eventgrid.azure.net:8883 </dev/null 2>/dev/null|openssl x509 -outform PEM >eventgrid.azure.pem
|
|
|
|
This produces eventgrid.azure.pem certificate file.
|
|
|
|
need root certificates
|
|
|
|
openssl s_client -showcerts -connect www.bigfoot-inc.com:443
|
|
|
|
openssl s_client -showcerts -connect mqtt-dev-server.westus2-1.ts.eventgrid.azure.net:8883
|
|
|
|
to get full certificate and save it to pem file:
|
|
openssl s_client -showcerts -connect mqtt-dev-server.westus2-1.ts.eventgrid.azure.net:8883 </dev/null 2>/dev/null|openssl x509 -outform PEM >mycertfile.pem
|
|
|
|
openssl s_client -showcerts -verify 5 -connect mqtt-dev-server.westus2-1.ts.eventgrid.azure.net:8883 < /dev/null
|
|
|
|
openssl s_client -showcerts -verify 5 -connect mqtt-dev-server.westus2-1.ts.eventgrid.azure.net:8883 < /dev/null |
|
|
awk '/BEGIN CERTIFICATE/,/END CERTIFICATE/{ if(/BEGIN CERTIFICATE/){a++}; out="cert"a".pem"; print >out}'
|
|
for cert in *.pem; do
|
|
newname=$(openssl x509 -noout -subject -in $cert | sed -nE 's/.*CN ?= ?(.*)/\1/; s/[ ,.*]/_/g; s/__/_/g; s/_-_/-/; s/^_//g;p' | tr '[:upper:]' '[:lower:]').pem
|
|
echo "${newname}"; mv "${cert}" "${newname}"
|
|
done
|
|
|
|
convert crl to pem
|
|
openssl crl -in "Microsoft Azure ECC TLS Issuing CA 08 - xsign.crt" -inform PEM -out "Microsoft Azure ECC TLS Issuing CA 08 - xsign.pem"
|