log_type error
log_type warning
log_type notice
log_type information
log_type debug

allow_anonymous true

# non-SSL listener
listener 18883

# listener for mutual authentication
listener 18884
cafile /etc/mosquitto/tls-testing/keys/all-ca.crt
certfile /etc/mosquitto/tls-testing/keys/server/server.crt
keyfile /etc/mosquitto/tls-testing/keys/server/server.key
require_certificate true

# server authentication - no client authentication
listener 18885
cafile /etc/mosquitto/tls-testing/keys/all-ca.crt
certfile /etc/mosquitto/tls-testing/keys/server/server.crt
keyfile /etc/mosquitto/tls-testing/keys/server/server.key
require_certificate false

listener 18886
cafile /etc/mosquitto/tls-testing/keys/all-ca.crt
certfile /etc/mosquitto/tls-testing/keys/server/server.crt
keyfile /etc/mosquitto/tls-testing/keys/server/server.key
require_certificate false
ciphers ADH-DES-CBC-SHA

# server authentication - no client authentication - uses fake hostname to
# simulate mitm attack. Clients should refuse to connect to this listener.
listener 18887
cafile /etc/mosquitto/tls-testing/keys/all-ca.crt
certfile /etc/mosquitto/tls-testing/keys/server/server-mitm.crt
keyfile /etc/mosquitto/tls-testing/keys/server/server-mitm.key
require_certificate false

