Starting SSL authenticated MQTT broker as service on Unix

Question

Server/client SSL authentication is enabled for MQTT broker.
When user starts broker using config file, the user is prompted to enter SSL passphrase and MQTT broker gets started after due auth check.

I have followed the below link to start MQTT broker as service,but service is failing as user is not prompted to enter password. https://alexander-rudde.com/2014/02/install-mosquitto-mqtt-broker-on-raspberry-pi-running-arch-linux/ How I can provide password for SSL server certificate if I want to start the Mosquitto broker as service.

If your key can't be password-less for some reason, you could try using Expect — Pavel Zdenek

hardillb hardillb · Accepted Answer · 2017-01-16T11:36:44

The short answer is you can't, you will need to remove the password from the private key file. You can do this with openssl

openssl rsa -in privateKey.pem -out newPrivateKey.pem

This will write a new copy of the keyfile without the passphrase

Starting SSL authenticated MQTT broker as service on Unix

1 Answers