Thanks! Using IO::Socket::SSL I was able to lift the fingerprint from the MQTT broker by adding the following segment. 

...
use IO::Socket::SSL;
...
print IO::Socket::SSL->new(
   PeerHost => "203.0.113.46:8883",
   SSL_verify_mode => 0,
)->get_fingerprint,"\n";
...

[download]

Then I was able to modify the connection to include that information with SSL_fingerprint: 

...
my $mqtt = Net::MQTT::Simple::SSL->new("203.0.113.46:8883", {
   SSL_ca_file   => "$cpath/certificate-authority.crt",
   SSL_cert_file => "$cpath/notifications-client.crt",
   SSL_key_file  => "$cpath/notifications-client.key",
   SSL_fingerprint => 'sha256$a...2',});
...

[download]

All set. It's kind of a manual intervention and implementation of Trust on First Use, since the fingerprint is probably the right one when fetched that way. Alternatively, I can use OpenSSL over on the system with the broker and thus get the fingerprint via the file system directly: 

openssl x509 -fingerprint -sha256 \
    -in /etc/mosquitto/certs/server.crt \
| sed -n -e '/Fingerprint/ { s/ .*=/$/; s/://g; p; }'

[download]

So I guess there are two ways to get the checksum.

In reply to Re^2: Self-signed certificates and Net::MQTT::Simple::SSL by mldvx4
in thread Self-signed certificates and Net::MQTT::Simple::SSL by mldvx4

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.