Hi Angelo, Justin has already pointed you to the standard/ssl-enabled-dual-authentication[1] example, that includes: certificate mutual authentication at transport level and certificate authentication/authorization at application level using TextFileCertificateLoginModule[2].
If you just need certificate mutual authentication at transport level, the standard/ssl-enabled-crl-mqtt example[3] shows you how to configure SSL mutual authentication with CRL[4] for MQTT, you can remove the `crlPath` parameter from the acceptor in the broker.xml file if you don't need CRL[4]. If certificate authentication/authorization is also required at application level, you could add it to the standard/ssl-enabled-crl-mqtt example following the dual authentication doc[5]. [1] https://github.com/apache/activemq-artemis/tree/main/examples/features/standard/ssl-enabled-dual-authentication [2] https://activemq.apache.org/components/artemis/documentation/latest/security.html#certificateloginmodule [3] https://github.com/apache/activemq-artemis/tree/main/examples/features/standard/ssl-enabled-crl-mqtt [4] https://en.wikipedia.org/wiki/Certificate_revocation_list [5] https://activemq.apache.org/components/artemis/documentation/latest/security.html#dual-authentication Regards, Domenico On Mon, 7 Feb 2022 at 09:59, Angelo Ginocchio <[email protected]> wrote: > Thanks Justin. > I was hoping there was a complete configuration specific to mqtts; I > have seen that there are many other configuration parameters, example: > acceptor, transportConnectors > Also, in the case of <transportConnectors ...> the uri is mqtt + ssl: > //x.x.x.x: 8883 > or > mqtt: //x.x.x.x: 8883 > > I am a bit confused. > > Thanks. > Angel > > Il 07/02/2022 00:23, Justin Bertram ha scritto: > > We ship an example in > > examples/features/standard/ssl-enabled-dual-authentication [1] the > > demonstrates the necessary configuration for cert-based authentication. > The > > example uses JMS, but the configuration will be the same for every > > supported protocol. > > > > > > Justin > > > > [1] > > > https://github.com/apache/activemq-artemis/tree/main/examples/features/standard/ssl-enabled-dual-authentication > > > > On Sun, Feb 6, 2022 at 11:07 AM Angelo Ginocchio < > [email protected]> > > wrote: > > > >> Hi everyone, > >> I use "Activemq artemis" and I have to configure the broker using the > >> MQTTS (secure-mqtt) connector with mutual authentication. > >> Do you have a configuration example that works that I can implement. > >> > >> Thank you > >> > >> Angelo > >> > >> >
