Unable to use MQTTS with CloudAPI due to Unknown CA Error

关注

Serhii Mykytko

• 3天前

Hi,

We are trying to connect RemoteController to my EMQX CloudAPI platform with TLS.

Currently I'm receiving error Unknown CA from RemoteController.

We are using GoDaddy certificate and mqttx client connects successfully via TLS.

If I try to connect RemoteController I receive the next error on EMQX:

│ 2025-03-31T15:11:55.501061+00:00 [notice] TLS server: In state certify received CLIENT ALERT: Fatal - Unknown CA                                                      │
│ 2025-03-31T15:11:55.502072+00:00 [notice] supervisor: {esockd_connection_sup,<0.24926.0>}, errorContext: ssl_error, reason: {tls_alert,{unknown_ca,"TLS server: In st │
│ ate certify received CLIENT ALERT: Fatal - Unknown CA\n"}}, offender: [{pid,<0.24926.0>},{name,connection},{mfargs,{emqx_connection,start_link,[#{listener => {ssl,de │
│ fault},limiter => #{connection => #{initial => 0,burst => 0,rate => infinity}},enable_authn => true,zone => default}]}}] 

Also, we have this connection settings:

          const param: ThingParam = {
          host: "ssl://mqtt.dev.mydomain.io:8883",
          username: "user_rc",
            password: accessToken,
            connectCallback: 'connectCallback',
        };

Attaching screenshots from mqttx:

And connection settings:

 

Could you, please, assist with the problem?

Thanks,
Serhii

0

• 

  DJI Developer Support

  • 2天前

  Dear developers, Hello, thank you for contacting DJI Innovation. The client does not recognize the certificate authority (CA) presented by the server. Check the client's certificate truststore to ensure it contains GoDaddy's root certificate I hope our solution can help you, thank you for your email, wish you a happy life! Best Regards, Dji innovation SDK technical support

  0

  评论操作 固定链接
• 

  Serhii Mykytko

  • 2天前

  Hi,

  Thanks for your reply. I need to double-check which trust store you are referring to. Do you mean the Android OS trust store on the Remote Controller, or does the Pilot2 application have its own internal trust store?

  By “Android OS trust store,” I mean this one:

  

   

  Thanks for help!

  0

  评论操作 固定链接
• 

  DJI Developer Support

  • 2天前

  Dear developers, Hello, thank you for contacting DJI Innovation. You can check it, and you can also check whether the CA certificate is available. I hope our solution can help you, thank you for your email, wish you a happy life! Best Regards, Dji innovation SDK technical support

  0

  评论操作 固定链接
• 

  Serhii Mykytko

  • 2天前

  I have two certificates: one from SSL.com and another from GoDaddy.

  Both root certificates are present in the Remote Controller’s trust store.

  Does the DJI RC support SSL.com certificates?

  Kind regards,
  Serhii

  0

  评论操作 固定链接
• 

  DJI Developer Support

  • 1天前

  Dear developers, Hello, thank you for contacting DJI Innovation. Currently supported certificates: GoDaddy Cloudflare (supported only at airports, not lighting) DigiCert certificate applied by Alibaba Cloud I hope our solution can help you, thank you for your email, wish you a happy life! Best Regards, Dji innovation SDK technical support

  0

  评论操作 固定链接
• 

  Serhii Mykytko

  • 6小时前

  Hi,

  Thank you for the information!

  BR,
  Serhii

  0

  评论操作 固定链接

请先登录再写评论。