Adds a fix for an MQTTNet bug on cert verifications

i8beef · Dec 26, 2022 · fa290d8 · fa290d8
1 parent 1c97d06
commit fa290d8
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/HomeAutio.Mqtt.Core/ServiceBase.cs b/src/HomeAutio.Mqtt.Core/ServiceBase.cs
@@ -152,14 +152,18 @@ public async Task StartAsync(CancellationToken cancellationToken = default)
                     throw new ArgumentException($"BrokerSettings {nameof(_brokerSettings.BrokerTlsSettings)} cannot be null when {nameof(_brokerSettings.BrokerUseTls)} is true");
                 }
 
+                // Temporary fix for https://github.com/dotnet/MQTTnet/issues/1547
+                var certificateValidationHandler = MqttClientDefaultCertificateValidationHandler.Handle;
+
                 var tlsOptions = new MqttClientOptionsBuilderTlsParameters
                 {
                     UseTls = _brokerSettings.BrokerUseTls,
                     AllowUntrustedCertificates = _brokerSettings.BrokerTlsSettings.AllowUntrustedCertificates,
                     IgnoreCertificateChainErrors = _brokerSettings.BrokerTlsSettings.IgnoreCertificateChainErrors,
                     IgnoreCertificateRevocationErrors = _brokerSettings.BrokerTlsSettings.IgnoreCertificateRevocationErrors,
                     SslProtocol = _brokerSettings.BrokerTlsSettings.SslProtocol,
-                    Certificates = _brokerSettings.BrokerTlsSettings.Certificates
+                    Certificates = _brokerSettings.BrokerTlsSettings.Certificates,
+                    CertificateValidationHandler = certificateValidationHandler
                 };
 
                 optionsBuilder.WithTls(tlsOptions);