MQTT Export Integration: TLS support for external broker and built-in broker bridge

I’m using Hubitat Elevation firmware 2.5.0.159 and the built-in MQTT Export Integration. I’m trying to connect Hubitat device states and commands to Home Assistant through an external Mosquitto broker.

When I configure the Export app with an external broker on TLS port 8883, the app stays disconnected. The broker logs show wrong version number during the TLS handshake, before MQTT authentication. The app’s settings page doesn’t show a TLS option. I also tried ssl://<broker-hostname> in the Broker host field with port 8883; the app stayed disconnected and the broker saw no connection.

Could you clarify:

  1. Does the native MQTT Export Integration support TLS when connecting to an external MQTT broker? If so, what is the supported way to configure it?
  2. If it does not, can Export publish to Hubitat’s built-in MQTT broker over TLS, and can a separate Mosquitto broker connect to that built-in broker over TLS with authentication?
  3. What topic format and permissions would be needed to relay device state to Home Assistant and send commands back to Hubitat devices?

I’ve kept device selection and Home Assistant discovery disabled while checking this. I can provide hub diagnostics or additional details privately if needed.