本地蚊子和 Watson-iot 之间的安全桥梁

Question

我需要你在 MQTT 桥接方面的帮助。目前我可以成功地将本地 MQTT 桥接到 Watson IOT 消息传递，但只能在不安全模式下，即。 1883端口。所以我通过这个命令获得了服务器证书

openssl s_client -connect myorg.messaging.internetofthings.ibmcloud.com:8883 -showcerts > server.crt

并删除了顶部的两行和底部的两行。当我尝试以安全模式连接它时，出现如下套接字错误。谁能帮我解决这个问题？

mosquitto.conf

connection bridge-to-watsoniot
bridge_insecure false
bridge_certfile /home/pi/server.crt
address myorg.messaging.internetofthings.ibmcloud.com:8883
cleansession false
try_private false
bridge_attempt_unsubscribe false
notifications true
notification_topic iot-2/type/Raspberry/id/my_mqtt_gateway/evt/status/fmt/raw
remote_username use-token-auth
remote_password ***************
remote_clientid g:myorg:Raspberry:my_mqtt_gateway
topic iot-2/type/+/id/+/cmd/+/fmt/+ in iot-2/type/+/id/+/cmd/+/fmt/+
topic iot-2/type/+/id/+/evt/+/fmt/+ out iot-2/type/+/id/+/evt/+/fmt/+
connection_messages true

mosqutto.log

1487240737: mosquitto version 1.4.10 (build date Thu, 25 Aug 2016 10:12:09 +0100) starting
1487240737: Config loaded from mosquitto.conf.
1487240737: Opening ipv4 listen socket on port 1883.
1487240737: Opening ipv6 listen socket on port 1883.
1487240737: Connecting bridge bridge-to-watsoniot (myorg.messaging.internetofthings.ibmcloud.com:8883)
1487240738: New connection from 127.0.0.1 on port 1883.
1487240738: New client connected from 127.0.0.1 as mqttjs_93a3961c (c1, k10, u'foo').
1487240738: New connection from 127.0.0.1 on port 1883.
1487240738: New client connected from 127.0.0.1 as mqttjs_618c88ab (c1, k10).
1487240739: Socket error on client local.g:myorg:Raspberry:my_mqtt_gateway, disconnecting.
1487240747: New connection from 192.168.82.130 on port 1883.

Answer 1

bridge_certfile 指令用于本地代理的客户端证书，用于向远程代理验证其自身。你应该不需要这个来连接到 Watson IoT。

您应该使用 bridge_cafile 或 bridge_capath 指向签署 Watson IoT 证书的 CA 证书，以便本地代理可以验证远程端是否如他们所说.

本地蚊子和 Watson-iot 之间的安全桥梁

Secure bridge between a local mosquito and Watson-iot

mqtt

mosquitto

watson-iot

mosquitto.conf

mosqutto.log