带有自签名证书的 Java mqtt 客户端 SSL 配置

Question

这是我想要实现的一个例子：

MqttClient client = new MqttClient("ssl://127.0.0.1:8883", "randomId");
client.setCallback(new MyCallback());
MqttConnectOptions options = new MqttConnectOptions();
options.setConnectionTimeout(60);
options.setKeepAliveInterval(60);
//Something like this
//options.setSSLProperties(sslProperties());
client.connect(options);
client.subscribe("topic", 0);

    private Properties sslProperties() {
        Properties properties = new Properties();
        properties.put(SSLSocketFactoryFactory.CA, "/home/ca.crt");
    }

我正在使用一个名为 MQTTfx 的工具。我只需要指向我的 ca.crt 文件，它就会连接到我的 mosquitto 代理。如何在 Java 中指定我的证书文件？

这就是我的 mosquitto 配置的样子：

port 8883

cafile /etc/mosquitto/ca_certificates/ca.crt
keyfile /etc/mosquitto/certs/server.key
certfile /etc/mosquitto/certs/server.crt

Answer 1

不幸的是，事情没那么简单。 您将需要创建一个 SSLSocketFactory 的实例，该实例具有指向您的 CA 证书的自定义 TrustStore。然后你将这个SSLSocketFactory 传递给MqttClient 在MqttConnectOptions 的一部分。

有点像（这没有异常处理，需要包装在适当的 try/catch 块中）

Keystore trustStore = KeyStore.getInstance(KeyStore.getDefaultType());
trustStore.load(null,null);
trustStore.setCertificateEntry("Custom CA", (X509Certificate) CertificateFactory.getInstance("X509").generateCertificate(new FileInputStream("/home/ca.crt"));

TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
tmf.init(trustStore);
TrustManager[] trustManagers = tmf.getTrustManagers();

SSLContext sslContext = SSLContext.getInstance("SSL");
sslContext.init(null, trustManagers, null);
SSLSocketFactory sslSocketFactory =  sslContext.getSocketFactory();

//where options is the MqttConnectOptions object
options.setSocketFactory(sslSocketFactory)