Hi, everybody,
I want to use mqtt.js via WSS in the browser. I don't want to use self-signed certificates. I have a flask application and a mosquitto mqtt broker on the same computer behind the cloudflare network - cloudflare offers a service to create free client certificates that encrypt data between the client and cloudflare, but not between cloudflare and the server. I'm not sure how much this will complicate the setup. My goal is to use end-to-end TLS protocol in my system between client devices and a broker.

If mqtt with cloudflare is too confusing, I don't need to have a broker behind cloudflare.
My main question is how to generate certificates for multiple IoT devices and a broker with a certificate authority recognized by the browser.
My secondary question is, how do I safely use the credentials in the browser to establish a WSS connection with the broker.
If my question needs clarification, please feel free to let me know.