# Mqtt websocket connection failure

**URL:** <https://community.hivemq.com/t/mqtt-websocket-connection-failure/2751>\
**Category:** HiveMQ Community Edition\
**Created:** [February 29, 2024, 8:31am UTC](https://community.hivemq.com/t/mqtt-websocket-connection-failure/2751 "2024-02-29T08:31:31Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![raheem12](https://avatars.discourse-cdn.com/v4/letter/r/35a633/32.png) [@raheem12](https://community.hivemq.com/u/raheem12)\
**Post date:** [February 29, 2024, 8:31am UTC](https://community.hivemq.com/t/mqtt-websocket-connection-failure/2751/1 "2024-02-29T08:31:31Z")

</div>

Dear Team,

i have setup mqtt using docker setup on linux . i have configured Tcp-Tls listener on 8883, and i am connecting through mqttx tool using mqtts://. below is the error which i get

Error: write EPROTO 8530952:error:10000410:SSL routines:OPENSSL\_internal:SSLV3\_ALERT\_HANDSHAKE\_FAILURE:…/…/third\_party/boringssl/src/ssl/tls\_record.cc:594:SSL alert number 40

Could you please help me in resolving this issue, awaiting for your update or help in this regard.

Thank you,  
Mohammed.

---

<div class="post-metadata">

**Author:** ![AaronTLFranz](https://yyz1.discourse-cdn.com/flex035/user_avatar/community.hivemq.com/aarontlfranz/32/638_2.png) [@AaronTLFranz](https://community.hivemq.com/u/AaronTLFranz)\
**Post date:** [March 7, 2024, 6:32pm UTC](https://community.hivemq.com/t/mqtt-websocket-connection-failure/2751/2 "2024-03-07T18:32:06Z")

</div>

Hello @raheem12 ,

Typically, an SSL alert 40 indicates that connection settings between the client and server were unable to successfully negotiate connection settings.

To start troubleshooting, I would first have you confirm that the TLS configuration settings for your connecting client meet the requirements for connecting to a HiveMQ broker. This includes [cipher suites](https://docs.hivemq.com/hivemq/latest/user-guide/security.html#cipher-suites) and TLS versioning.

Additionally, when connecting via TLS to your broker, ensure that if the connecting client requires a server certificate or client certificate, this has been provided to the connecting client before establishing the connection. We have a how-to guide regarding TLS setup with self-signed certificates available within our documentation [here](https://docs.hivemq.com/hivemq/latest/user-guide/howtos.html).

Best,  
Aaron from the HiveMQ Team