mqtt雙向ssl認證

最新推荐文章于 2025-05-21 22:00:00 发布

原创

最新推荐文章于 2025-05-21 22:00:00 发布 · 941 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#ssl #雙向認證

本文介绍如何使用mosca库配置MQTT服务器，实现双SSL认证。通过设置CA证书、服务器密钥和证书，以及监听不同端口，确保客户端连接的安全性。同时，定义了认证、发布和订阅的授权策略。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

const mosca = require('mosca');
const tls = require('tls');
var mqttconfig=require('../config/mqtt_config/mqtt_config').config;
//var dataParse = require('./dataParse');


var CAFILE = '../ssl-file/cert_mesh_mqtts_100y_sha256/ca.crt';  		
var SECURE_KEY = '../ssl-file/cert_mesh_mqtts_100y_sha256/server.key.insecure';
var SECURE_CERT = '../ssl-file/cert_mesh_mqtts_100y_sha256/server.crt';


var sslsetting = {
	port: 1883,
	logger:{
		name:"secureExample",
		level:40,
	},
	secure :{
		port: 9883,
		keyPath: SECURE_KEY,
		certPath: SECURE_CERT,
		caPaths: [CAFILE],  //ca could have lots,so this place should use array.
		requestCert: true,
	}
};


var server = new mosca.Server(sslsetting);    //connect client 
var clientId;
//var packetMessage;

server.on('clientConnected', function(client) {
    console.log('client connected ! cilent id :', c