#1150063 mosquitto: README-letsencrypt mentions non-existing renewal hook script mosquitto-copy.sh

Package:
mosquitto
Source:
mosquitto
Description:
MQTT version 5.0/3.1.1/3.1 compatible message broker
Submitter:
Jens Reyer
Date:
2026-10-06 20:15:02 UTC
Severity:
normal
#1150063#5
Date:
2026-10-05 13:35:10 UTC
From:
To:
Hi

README-letsencrypt.md references a non-existing renewal hook script in
`misc/letsencrypt/mosquitto-copy.sh`.


After some websearch I came up with something like this to deploy the
letsencrypt certificates readable by mosquitto (not fully tested, I'm
still waiting for the first real certificate renewal):



# cat /etc/letsencrypt/renewal-hooks/deploy/mosquitto-copy
#!/bin/sh
set -e

CERT_DIR="/etc/letsencrypt/live/mqtt.example.com"
DEST_DIR="/etc/mosquitto/certs"

install -o mosquitto -g mosquitto -m 0644 \
     "$CERT_DIR/fullchain.pem" \
     "$DEST_DIR/fullchain.pem"

install -o mosquitto -g mosquitto -m 0600 \
     "$CERT_DIR/privkey.pem" \
     "$DEST_DIR/privkey.pem"

systemctl reload mosquitto
#1150063#10
Date:
2026-10-06 19:31:44 UTC
From:
To:
It will be packaged with the next version. Luckily README-
letsencrypt.md has automatically been packaged, so we noticed it is
missing.

Thanks for reporting,
Joachim