Mosquitto: PKCS#11 support for MQTT over OpenSSL

Created on 17 Jan 2018  路  2Comments  路  Source: eclipse/mosquitto

I am interested in adding PKCS#11 support to Mosquitto to support reading private keys from HSMs/TPMs. Is there such a feature on the roadmap for Mosquitto?

Most helpful comment

Bump
PKCS#11 support at the client is a critical next step to taking MQTT, and IoT in general, over the security hump.
Despite the imminence of this integration being postulated to Microchip, AWS IoT SDK and PAHO issue tracking threads for many months, there doesn't seem to be any movement.
Has this PR really been simmering on a back burner for ~2 years?

All 2 comments

Any update on this topic? There is a PR related IIUC: https://github.com/eclipse/mosquitto/pull/719

Bump
PKCS#11 support at the client is a critical next step to taking MQTT, and IoT in general, over the security hump.
Despite the imminence of this integration being postulated to Microchip, AWS IoT SDK and PAHO issue tracking threads for many months, there doesn't seem to be any movement.
Has this PR really been simmering on a back burner for ~2 years?

Was this page helpful?
0 / 5 - 0 ratings