mosquitto-auth-plug | Authentication plugin for Mosquitto | Authorization library

I'm trying to set up my mosquitto server inside a Kubernetes cluster and somehow I'm getting the following error and I can't figure out why. Could someone help me?

Error:

I need an advanced auth for Mosquitto. I decided to use mosquitto-auth-plug

However, if I follow the build instructions I have the error:

I'm running Mosquitto broker (version 1.4.14) with the mosquitto-auth-plugin (HTTP backend). Clients have to authenticate with username and password and in some cases pass acl-requirements.

It seems that all authenticated users can subscribe to the topic '#' which shows all pubs to all topics.

In the ACL the wildcard # seems to be already replaced with the topic-name so I cannot deny it's subscription.

Is it possible to deny a subscription to all topics in the configuration?

If topics start with a $ chr then the issue is solved but the MQTT-spec says: 'Applications cannot use a topic with a leading $ character for their own purposes.' (4.7.2 Topics beginning with $)

I'm using pubsubclient library.
I used this function to connect to mosquitto broker which using mosquitto-auth-plug with JWT authentication.

I have spent all day trying to make a usable pbkdf2 password for the mosquitto-auth-plug. This program sets it up exactly the way it should be stored in the mysql database. I have a password hash generated by the program that comes with auth-plug and mosquitto loves it. I just can't replicate it in c#, if anyone can help please let me know.

I am trying to connect to my mosquitto mqtt broker in an Xamarin c# application using M2Mqtt.

I am having a difficult time creating the x509 certificate in my program

SEE --- My other question

Xamarin Visual Studio createcertfromfile path no working

But I wanted to float this question just to see if any one out there has done this. I have spent 2 days making absolutely no progress.

My only concern is encrypting the communication between the mobile device and my mosquito broker.

I have secured the broker with mosquitto-auth-plug and I can't be sending the credentials over the air.

One other question -- I am not concerned with verifying the mobile user I just want to create a secure encrypted connection with my broker, so I am not going to need my users to get any certificates or anything?? correct

-----Edit for hardilib

I have a mosquitto broker running on a centos 7 server. I have configured the broker to accept ssl/tls connections and have used mosquitto-auth-plug for user security.

I have a mobile application written in c# Xamarin with visual studio 2017 enterprise edition.

I have very good non encrypted communication between my mqtt broker and mobile application using M2Mqtt client.

I need encrypted communication between the mobile application and the broker for this to work in a real world situation.

I have tried to follow the only information I can find at

http://embedded101.com/Blogs/PaoloPatierno/entryid/366/MQTT-over-SSL-TLS-with-the-M2Mqtt-library-and-the-Mosquitto-broker

I have it all complete except the part

The CA certificate was included in a resource file (Resources.resx) and, once read as a byte stream is provided to the X509Certificate constructor class, in order to obtain a valid X.509 certificate for the MqttClient.

Client Connection String

Not sure if you can read the picture....

/bin/ld: cannot find -lmosquitto

is the error.

I'm using centos 7

mosquitto-auth-plug config file has been updated with mosquitto src and openssl install directory and they are correct.

My previous error was mysql_config not found which I was able to fix by installing libmysqlclient-devel

mysql is installed and working fine

Let me know if you can help Thanks