Certificate Authority and self-signed certificate for SSL/TLS – Home Assistant

Jovan Stosic May 31, 2021

Update the http: entry in your configuration.yaml file and let it point to your created files.

Home Assistant & Home Assistant Supervised:

http:
ssl_certificate: /ssl/fullchain.pem
ssl_key: /ssl/privkey.pem

Home Assistant Core:

http:
ssl_certificate: /home/your_user/.homeassistant/fullchain.pem
ssl_key: /home/your_user/.homeassistant/privkey.pem

Home Assistant Core on Docker:

http:
ssl_certificate: /config/fullchain.pem
ssl_key: /config/privkey.pem

 

Source: Certificate Authority and self-signed certificate for SSL/TLS – Community Guides – Home Assistant Community

ESP8266 and mosquitto: Wificlientsecure apparently connects but after it aborts · Issue #4541 · esp8266/Arduino · GitHub

Jovan Stosic May 30, 2021 
1) Generate a CA certificate and key
sudo openssl req -new -x509 -days 3650 -extensions v3_ca -keyout mqtt_ca.key -out mqtt_ca.crt

2) Generate a server key
sudo openssl genrsa -out mqtt_server.key 2048

3) Generate a certificate signing request to send to the CA
sudo openssl req -out mqtt_server.csr -key mqtt_server.key -new

4) Send the CSR to the CA, or sign it with your CA key
sudo openssl x509 -req -in mqtt_server.csr -CA mqtt_ca.crt -CAkey mqtt_ca.key -CAcreateserial -out mqtt_server.crt -days 3650

Source: ESP8266 and mosquitto: Wificlientsecure apparently connects but after it aborts · Issue #4541 · esp8266/Arduino · GitHub