← Back to team overview

mosquitto-users team mailing list archive

Re: Mosquitto SSL options for embedded targets

 

Thanks Roger.  I have tried about 4 different packages thus far trying to figure out the least evil approach.  One thing I know for sure, OpenSSL was not written for bare-metal non-OS usage on something like an ARM Cortex M3.  I have spent almost a full day trying to get it compiled as a library using IAR for the M3 and I am still nowhere close.  I have given up on trying to get OpenSSL working for me.  Crazy.  So I am now looking at something like PolarSSL, MatrixSSL, or CycloneSSL, unless somebody has a better solution I should look at.  Since the project will not support GPL licensing, I guess I will be looking for commercial licenses and see what is the best fit overall.



And so begins the fun of another week…



From: rogerlight@xxxxxxxxx [mailto:rogerlight@xxxxxxxxx] On Behalf Of Roger Light
Sent: Monday, March 03, 2014 2:43 PM
To: david.reid@xxxxxxxxxxxxxxxxxx
Cc: mosquitto-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Mosquitto-users] Mosquitto SSL options for embedded targets



Hi David,

You're not wrong, it only uses openssl at the moment. In theory if you compile without TLS-PSK support it should be quite straightforward to use another SSL library that has an openssl compatibility layer. It's not doing anything particularly unusual. I haven't tried to do it though, so can't promise anything.



Best of luck getting it working!

Cheers,

Roger



On Fri, Feb 28, 2014 at 5:49 PM, David Reid <david.reid@xxxxxxxxxxxxxxxxxx> wrote:

All,



Using Mosquitto v1.2.3 along with lwIP v1.4.1 and FreeRTOS v8.0.0 on an ARM Cortex M3.  I am trying to add SSL to the mix, and it would seem that Mosquitto is designed for OpenSSL interface only.  Am I wrong?



Just wondering if any other users have successfully gotten SSL working with Mosquitto using something else besides OpenSSL?  Or if they have OpenSSL with Mosquitto working on a platform similar to mine, what is the resulting compiled output size and the amount of work?



I am using an IAR compiler and my license will let me create up to 256K, but I am seeing reports via Google searches of 1MB output when compiling OpenSSL, which might work on a PC, but definitely not on my target.  Should be able to prune that hopefully, have not tried yet.  I do not mind switching to a commercial product/license for another SSL library if necessary, provided it will work nicely with Mosquitto.



I am trying to judge the amount of effort and if it is even possible to get SSL on Mosquitto in my M3 project.  Anybody else out there done this on a M3?  If so, do you mind sharing how, library used,  and any other details that you could?



Thanks.



Regards,

Dave





  _____


 <http://www.avast.com/>

This email is free from viruses and malware because avast! Antivirus <http://www.avast.com/>  protection is active.




--
Mailing list: https://launchpad.net/~mosquitto-users
Post to     : mosquitto-users@xxxxxxxxxxxxxxxxxxx
Unsubscribe : https://launchpad.net/~mosquitto-users
More help   : https://help.launchpad.net/ListHelp





---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

Follow ups

References