Post #1635324
2026-04-24 14:52 UTC
Uggh, the home assistant MQTT cert expired despite cert-manager renewing it...
Why? Because home assistant doesn't accept point to MQTT certs on disk. You're supposed to paste the certs into the UI when configuring MQTT and I guess just repeat that task as a fun little chore if certs have a shorter lifespan, neat.
The actually had the reasonable functionality in the past where the config pointed to a path on disk but intentionally made that a regression at some point.
I say intentionally because I found an issue for this regression and it was closed by a maintainer as WONTFIX. Bleh.
The cert is stored as base64 in one of the json config files so also good stuff. But that is fine because the absolutely do not want to support commiting the config to any version control as well.
#HomeAssistant
Replies (2)
-
@rachel@transitory.social 2026-04-24 16:45
Also for some reason the cert has the wrong duration which is why I had this pop up so soon but that is on me for not checking the duration of the cert that cert-manager created.
-
@nicr9@techhub.social 2026-04-24 14:59
@rachel is there an API endpoint? Dynatrace has a similar workflow to update certs for the fleet of monitoring agents via the UI but we dug into the API docs and found it was straight forward to update that way