Certificate has expired, Connections error on electronJs

vijaysy · October 19, 2021, 7:17am

Hi All

We are facing similar issue as unable to make connection using mqtts in newer versions of electron · Issue #18105 · electron/electron · GitHub.
We need to add some cipher which are also supported by boringSSL.

We are using Pay as you go & Free addition.

Looking input for this issue.

Thank you
Vijay

SShet · October 20, 2021, 11:37am

Hello @vijaysy

Thanks for reaching out. We would like to confirm if you are using the Hivemq Cloud product. If so please help us with your cluster URL in order to work further on this issue. Also, let us know which cipher you are looking to add? Meantime i will confirm internally which cipher suites we are supporting in Hivemq Cloud.

Kind regards,
Sheetal

vijaysy · October 26, 2021, 8:02am

Hi @SShet

I am not comfortable to share URL in public forum,
Pls provide me ur email address , will share 1-1

We need cipher suites supported by boring-ssl

github.com

google/boringssl/blob/master/ssl/test/runner/cipher_suites.go#L99

    
      
          	aead   func(version uint16, key, fixedNonce []byte) *tlsAead
          }
          
          
func (cs cipherSuite) hash() crypto.Hash {
          	if cs.flags&suiteSHA384 != 0 {
          		return crypto.SHA384
          	}
          	return crypto.SHA256
          }
          
          
var cipherSuites = []*cipherSuite{
          	{TLS_CHACHA20_POLY1305_SHA256, 32, 0, ivLenChaCha20Poly1305, nil, suiteTLS13, nil, nil, aeadCHACHA20POLY1305},
          	{TLS_AES_128_GCM_SHA256, 16, 0, ivLenAESGCM, nil, suiteTLS13, nil, nil, aeadAESGCM},
          	{TLS_AES_256_GCM_SHA384, 32, 0, ivLenAESGCM, nil, suiteTLS13 | suiteSHA384, nil, nil, aeadAESGCM},
          	{TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, 32, 0, ivLenChaCha20Poly1305, ecdheECDSAKA, suiteECDHE | suiteECDSA | suiteTLS12, nil, nil, aeadCHACHA20POLY1305},
          	{TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256, 32, 0, ivLenChaCha20Poly1305, ecdheRSAKA, suiteECDHE | suiteTLS12, nil, nil, aeadCHACHA20POLY1305},
          	{TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, 16, 0, ivLenAESGCM, ecdheRSAKA, suiteECDHE | suiteTLS12, nil, nil, aeadAESGCM},
          	{TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, 16, 0, ivLenAESGCM, ecdheECDSAKA, suiteECDHE | suiteECDSA | suiteTLS12, nil, nil, aeadAESGCM},
          	{TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, 32, 0, ivLenAESGCM, ecdheRSAKA, suiteECDHE | suiteTLS12 | suiteSHA384, nil, nil, aeadAESGCM},
          	{TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, 32, 0, ivLenAESGCM, ecdheECDSAKA, suiteECDHE | suiteECDSA | suiteTLS12 | suiteSHA384, nil, nil, aeadAESGCM},
          	{TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, 16, 32, ivLenAES, ecdheRSAKA, suiteECDHE | suiteTLS12, cipherAES, macSHA256, nil},

SShet · October 26, 2021, 11:30am

Hello @vijaysy

Thanks for sharing the details.
The connection error is not related to cipher suits but with the certificates. HiveMQ Cloud free now uses LetsEncrypt certificates. You will need to update your devices trust store so that it trusts the LetsEncrypt certificate to connect with HiveMQ cloud again. For more details please check our FAQ section..

Kind regards,
Sheetal

Topic		Replies	Views
Ssl: certificate_verify_failed] HiveMQ Cloud	6	3582	October 1, 2021
Constraint cipher suites in mqtt client	3	606	October 26, 2023
No_ciphers_available HiveMQ Community Edition	1	1061	November 21, 2022
ESP32 not able to connect to HimeMQ cloud HiveMQ Cloud	15	1830	June 27, 2023
TLS 1.3 The client and server communicate Exception HiveMQ Community Edition	5	1450	March 10, 2022

Certificate has expired, Connections error on electronJs

Related topics