You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Choose a size in bits for your keypairs. The recommended value is 2048. Using
101
+
# Choose a size in bits for your keypairs. The recommended value is 2048. Using
102
102
# 2048-bit keys is considered more than sufficient for many years into the
103
103
# future. Larger keysizes will slow down TLS negotiation and make key/DH param
104
104
# generation take much longer. Values up to 4096 should be accepted by most
@@ -208,7 +208,7 @@ Add the following to `user_config_override.h`:
208
208
```
209
209
#ifndef USE_MQTT_TLS
210
210
#define USE_MQTT_TLS
211
-
// #define USE_MQTT_TLS_CA_CERT // Force full CA validation instead of fingerprints, slower, but simpler to use. (+2.2k code, +1.9k mem during connection handshake)
211
+
// #define USE_MQTT_TLS_CA_CERT // Force full CA validation instead of fingerprints, slower, but simpler to use. (+2.2k code, +1.9k mem during connection handshake)
212
212
#define USE_MQTT_AWS_IOT // This includes the LetsEncrypt CA in tasmota_ca.ino for verifying server certificates
213
213
#define USE_MQTT_TLS_FORCE_EC_CIPHER // Force Elliptic Curve cipher (higher security) required by some servers (automatically enabled with USE_MQTT_AWS_IOT) (+11.4k code, +0.4k mem)
@@ -221,7 +221,7 @@ Add the following to `user_config_override.h`:
221
221
```
222
222
#ifndef USE_MQTT_TLS
223
223
#define USE_MQTT_TLS
224
-
#define USE_MQTT_TLS_CA_CERT // Force full CA validation instead of fingerprints, slower, but simpler to use. (+2.2k code, +1.9k mem during connection handshake)
224
+
#define USE_MQTT_TLS_CA_CERT // Force full CA validation instead of fingerprints, slower, but simpler to use. (+2.2k code, +1.9k mem during connection handshake)
225
225
#define USE_MQTT_AWS_IOT // This will include LetsEncrypt CA, as well as our CA, in tasmota_ca.ino for verifying server certificates
226
226
#define USE_MQTT_TLS_FORCE_EC_CIPHER // Force Elliptic Curve cipher (higher security) required by some servers (automatically enabled with USE_MQTT_AWS_IOT) (+11.4k code, +0.4k mem)
227
227
#define INCLUDE_LOCAL_CERT
@@ -330,7 +330,7 @@ To start Mosquitto on Windows, either use the services snap-in (`services.msc`),
330
330
net start mosquitto
331
331
```
332
332
333
-
### 6. - Generate and configure certificates for your devices
333
+
### 6. Generate and configure certificates for your devices
334
334
335
335
!!! failure "Repeated step" Repeat the following 6.x steps once for every device, changing tasmota_name for each device. You will be prompted for a private key password for each device.
336
336
After entering the new password (twice for verification), you will also be prompted for the private key password of the root CA certificate.
0 commit comments