Add-on SSL Paths

What is the path the the add-on configurations uses? I can not for the life of me get ssl working on anything within hass except for the main system. I have my own cert I want to use and no add-ons can find it…

I’ve tried both absolute paths and relative (to what?)

Edit:
So I disabled SSL in the add-on (I’m using the community mqtt/hivemq if it makes a difference)

I connected to the docker and looked at its file system…

root@a0d7b954-mqtt:/share/ssl$ ls
ca.pem         cert.pem       dhparams.pem   fullchain.pem  key.pem

Awesome… I found the files… Lets set this up…

{
  "log_level": "info",
  "certfile": "/share/ssl/cert.pem",
  "keyfile": "/share/ssl/key.pem",
  "web": {
    "enabled": true,
    "ssl": true
  },
  "broker": {
    "enabled": true,
    "enable_ws": false,
    "enable_mqtt": false,
    "enable_ws_ssl": true,
    "enable_mqtt_ssl": true,
    "allow_anonymous": false
  },
  "mqttusers": [
    {
      "username": "none",
      "password": "nope",
      "readonly": false,
      "topics": [
        "#"
      ]
    }
  ]
}

And lets start up mqtt again…

[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 00-banner.sh: executing...

-----------------------------------------------------------
 Hass.io Add-on: MQTT Server & Web client v0.3.0

 Mosquitto MQTT Server bundled with Hivemq's web client

 From: Community Hass.io Add-ons
 By: Franck Nijhof <[email protected]>
-----------------------------------------------------------
 armhf / null / HA 0.84.6 / SU 141 / stable
-----------------------------------------------------------
[cont-init.d] 00-banner.sh: exited 0.
[cont-init.d] 01-log-level.sh: executing...
Log level is set to INFO
[cont-init.d] 01-log-level.sh: exited 0.
[cont-init.d] 02-updates.sh: executing...

INFO: You are running the latest version of this add-on
[cont-init.d] 02-updates.sh: exited 0.
[cont-init.d] 10-requirements.sh: executing...
FATAL: The configured certfile is not found
[cont-init.d] 10-requirements.sh: exited 1.
[cont-finish.d] executing container finish scripts...
[cont-finish.d] 99-message.sh: executing...
-----------------------------------------------------------
                Oops! Something went wrong.

 We are so sorry, but something went terribly wrong when
 starting or running this add-on.

 Be sure to check the log above, line by line, for hints.
-----------------------------------------------------------
[cont-finish.d] 99-message.sh: exited 0.
[cont-finish.d] done.
[s6-finish] syncing disks.
[s6-finish] sending all processes the TERM signal.

Nope… it cant find my certs…


Edit:

Finally got it work…

So apparently the files HAVE to be located in the /ssl (from hassio) or /resin-data/ssl/ (from host)

Once I moved those files over everything started to work. I’ll have to update my script now for the changes, but it shouldn’t be too hard.

One more final edit… I just happened to notice in the readme of mqtt that it even says these files must be located there… :confused: oh well. That would of saved me several hours of work had I seen that.