2015-12-08 16:57:14 +00:00
|
|
|
mosquitto
|
|
|
|
|
=========
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[Mosquitto][1] is an open source (BSD licensed) message broker that implements
|
2021-11-15 05:37:03 +00:00
|
|
|
the MQTT protocol versions 3.1 and 3.1.1.
|
2015-12-08 16:57:14 +00:00
|
|
|
|
2015-12-08 17:02:10 +00:00
|
|
|
## docker-compose.yml
|
|
|
|
|
|
2016-11-02 17:34:54 +00:00
|
|
|
```yaml
|
2021-11-15 05:37:03 +00:00
|
|
|
version: "3.8"
|
|
|
|
|
services:
|
|
|
|
|
mosquitto:
|
|
|
|
|
image: vimagick/mosquitto
|
|
|
|
|
ports:
|
|
|
|
|
- "1883:1883"
|
|
|
|
|
volumes:
|
|
|
|
|
- ./data/etc:/etc/mosquitto
|
|
|
|
|
- ./data/var:/var/lib/mosquitto
|
|
|
|
|
restart: unless-stopped
|
2015-12-08 17:02:10 +00:00
|
|
|
```
|
|
|
|
|
|
2016-11-02 17:34:54 +00:00
|
|
|
## mosquitto.conf
|
|
|
|
|
|
2017-05-22 06:48:55 +00:00
|
|
|
```ini
|
2021-11-15 05:37:03 +00:00
|
|
|
listener 1883
|
2016-11-02 17:34:54 +00:00
|
|
|
log_dest stdout
|
2017-05-22 06:48:55 +00:00
|
|
|
allow_anonymous false
|
2017-04-22 04:19:52 +00:00
|
|
|
password_file /etc/mosquitto/pwfile
|
2016-11-02 17:34:54 +00:00
|
|
|
persistence true
|
|
|
|
|
persistence_location /var/lib/mosquitto
|
2021-11-15 05:37:03 +00:00
|
|
|
persistence_file mosquitto.db
|
|
|
|
|
#plugin /usr/lib/mosquitto_dynamic_security.so
|
|
|
|
|
#plugin_opt_config_file /etc/mosquitto/dynamic-security.json
|
2017-05-22 06:48:55 +00:00
|
|
|
|
|
|
|
|
###### ENABLE TLS ######
|
|
|
|
|
listener 8883
|
|
|
|
|
protocol mqtt
|
|
|
|
|
capath /etc/ssl/certs
|
|
|
|
|
certfile /var/lib/mosquitto/fullchain.pem
|
|
|
|
|
keyfile /var/lib/mosquitto/privkey.pem
|
2016-11-02 17:34:54 +00:00
|
|
|
require_certificate false
|
|
|
|
|
```
|
|
|
|
|
|
2017-04-22 04:19:52 +00:00
|
|
|
- `pwfile` is managed by [mosquitto_passwd][3].
|
2017-05-22 06:48:55 +00:00
|
|
|
- Two methods to support TLS:
|
|
|
|
|
- You can get free TLS certificates from letsencrypt, `capath` is needed.
|
|
|
|
|
- Self-signed TLS keys can be generated by [openssl][2], `cafile` is needed.
|
2016-11-02 17:34:54 +00:00
|
|
|
|
2017-05-22 06:48:55 +00:00
|
|
|
> It is important to use different certificate subject parameters for your self-signed CA, server and clients.
|
2016-11-02 17:34:54 +00:00
|
|
|
|
|
|
|
|
## server
|
|
|
|
|
|
2017-05-22 06:48:55 +00:00
|
|
|
```bash
|
2021-11-15 05:37:03 +00:00
|
|
|
$ mkdir -p data/{etc,var}
|
|
|
|
|
$ chmod -R 777 data
|
|
|
|
|
$ touch data/etc/mosquitto.conf data/etc/pwfile
|
|
|
|
|
$ vi data/etc/mosquitto.conf
|
2016-11-02 17:34:54 +00:00
|
|
|
$ docker-compose up -d
|
2017-04-22 04:19:52 +00:00
|
|
|
$ docker-compose exec mosquitto sh
|
|
|
|
|
>>> cd /etc/mosquitto
|
2017-05-06 04:59:40 +00:00
|
|
|
>>> mosquitto_passwd -b pwfile username password
|
|
|
|
|
>>> cat pwfile
|
|
|
|
|
username:$6$IuF7JUzS1k/QoF3y$YpiClom7/==
|
2017-04-22 04:19:52 +00:00
|
|
|
>>> exit
|
|
|
|
|
$ docker-compose restart
|
2016-11-02 17:34:54 +00:00
|
|
|
$ docker-compose logs -f
|
|
|
|
|
Attaching to mosquitto_mosquitto_1
|
|
|
|
|
mosquitto_1 | 1478107412: mosquitto version 1.4.8 (build date 2016-05-16 14:17:19+0000) starting
|
|
|
|
|
mosquitto_1 | 1478107412: Config loaded from /etc/mosquitto/mosquitto.conf.
|
|
|
|
|
mosquitto_1 | 1478107412: Opening ipv4 listen socket on port 8883.
|
|
|
|
|
mosquitto_1 | 1478107412: Opening ipv6 listen socket on port 8883.
|
|
|
|
|
mosquitto_1 | 1478107437: New connection from 192.168.31.102 on port 8883.
|
|
|
|
|
mosquitto_1 | 1478107437: New client connected from 192.168.31.102 as mosqsub/38158-Kevins-Ma (c1, k60).
|
|
|
|
|
mosquitto_1 | 1478107585: New client connected from 192.168.31.102 as mosqpub/38324-Kevins-Ma (c1, k60).
|
|
|
|
|
mosquitto_1 | 1478107585: Client mosqpub/38324-Kevins-Ma disconnected.
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## client
|
|
|
|
|
|
|
|
|
|
```bash
|
2017-04-22 04:19:52 +00:00
|
|
|
$ mosquitto_sub -d -h 192.168.31.231 -p 8883 --cafile ca.crt --insecure -u username -P password -t hello
|
2016-11-02 17:34:54 +00:00
|
|
|
Client mosqsub/38158-Kevins-Ma sending CONNECT
|
|
|
|
|
Client mosqsub/38158-Kevins-Ma received CONNACK
|
|
|
|
|
Client mosqsub/38158-Kevins-Ma sending SUBSCRIBE (Mid: 1, Topic: hello, QoS: 0)
|
|
|
|
|
Client mosqsub/38158-Kevins-Ma received SUBACK
|
|
|
|
|
Subscribed (mid: 1): 0
|
|
|
|
|
Client mosqsub/38158-Kevins-Ma sending PINGREQ
|
|
|
|
|
Client mosqsub/38158-Kevins-Ma received PINGRESP
|
|
|
|
|
received PUBLISH (d0, q0, r0, m0, 'hello', ... (5 bytes))
|
|
|
|
|
world
|
|
|
|
|
Client mosqsub/38158-Kevins-Ma sending PINGREQ
|
|
|
|
|
Client mosqsub/38158-Kevins-Ma received PINGRESP
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
```bash
|
2017-04-22 04:19:52 +00:00
|
|
|
$ mosquitto_pub -d -h 192.168.31.231 -p 8883 --cafile ca.crt --insecure -u username -P password -t hello -m world
|
2016-11-02 17:34:54 +00:00
|
|
|
Client mosqpub/38324-Kevins-Ma sending CONNECT
|
|
|
|
|
Client mosqpub/38324-Kevins-Ma received CONNACK
|
|
|
|
|
Client mosqpub/38324-Kevins-Ma sending PUBLISH (d0, q0, r0, m1, 'hello', ... (5 bytes))
|
|
|
|
|
Client mosqpub/38324-Kevins-Ma sending DISCONNECT
|
|
|
|
|
```
|
|
|
|
|
|
2015-12-08 16:57:14 +00:00
|
|
|
[1]: http://mosquitto.org/
|
2016-11-02 17:34:54 +00:00
|
|
|
[2]: https://mosquitto.org/man/mosquitto-tls-7.html
|
|
|
|
|
[3]: https://mosquitto.org/man/mosquitto_passwd-1.html
|
