mqtt paho ssl java端代码【转】

最新推荐文章于 2024-08-10 23:28:28 发布
最新推荐文章于 2024-08-10 23:28:28 发布
阅读量3.5k 收藏 1
点赞数
分类专栏： Android

来自：http://blog.csdn.net/lingshi210/article/details/52439050

mqtt 的ssl配置可以参阅 
http://houjixin.blog.163.com/blog/static/35628410201432205042955/

然后注意开启防火墙端口。

mqtt的命令和Java端的ssl 必须同时要带上ca.crt、clilent.crt、client.key三个文件，即CA证书、客户证书、客户私钥。

由于java 端不支持client.key的格式，需要命令进行转化

openssl pkcs8 -topk8 -in client.key -out client.pem -nocrypt

另外： 
不知为何ubuntu下关闭防火墙后还是握手失败，cenos下正常，抓包后已经看不到明文了。

Java部分：

1.核心部分只需要设置SSLSocketFactory

MqttConnectOptions options = new MqttConnectOptions();
SSLSocketFactory factory=getSSLSocktet("youpath/ca.crt","youpath/client.crt","youpath/client.pem","password");
 
options.setSocketFactory(factory);

2.自定义SSLSocketFactory （改进于http://gist.github.com/4104301）

此处的密码应为生成证书的时候输入的密码，未认证。

private SSLSocketFactory getSSLSocktet(StringcaPath,String crtPath, String keyPath, String password) throws Exception {
        // CAcertificate is used to authenticate server
       CertificateFactory cAf = CertificateFactory.getInstance("X.509");
       FileInputStream caIn = new FileInputStream(caPath);
       X509Certificate ca = (X509Certificate) cAf.generateCertificate(caIn);
         KeyStorecaKs = KeyStore.getInstance("JKS");
         caKs.load(null, null);
         caKs.setCertificateEntry("ca-certificate", ca);
        TrustManagerFactory tmf = TrustManagerFactory.getInstance("PKIX");
         tmf.init(caKs);
 
       CertificateFactory cf = CertificateFactory.getInstance("X.509");
        FileInputStreamcrtIn = new FileInputStream(crtPath);
       X509Certificate caCert = (X509Certificate) cf.generateCertificate(crtIn);
 
        crtIn.close();
        // clientkey and certificatesare sent to server so it can authenticate
        // us
        KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
//      ks.load(caIn,password.toCharArray());
        ks.load(null, null);
        ks.setCertificateEntry("certificate", caCert);
        ks.setKeyEntry("private-key",getPrivateKey(keyPath), password.toCharArray(),
                newjava.security.cert.Certificate[]{caCert}  );
       KeyManagerFactory kmf = KeyManagerFactory.getInstance("PKIX");
        kmf.init(ks, password.toCharArray());
//      keyIn.close();
 
        // finally,create SSL socket factory
        SSLContextcontext = SSLContext.getInstance("TLSv1");
 
        context.init(kmf.getKeyManagers(),tmf.getTrustManagers(), newSecureRandom());
 
        returncontext.getSocketFactory();
    }

Android上会报错，改进如下：

 

   privateSSLSocketFactory getSSLSocktet(String caPath,String crtPath, String keyPath,String password) throws Exception {
        // CAcertificate is used to authenticate server
       CertificateFactory cAf = CertificateFactory.getInstance("X.509");
       FileInputStream caIn = new FileInputStream(caPath);
       X509Certificate ca = (X509Certificate) cAf.generateCertificate(caIn);
         KeyStorecaKs = KeyStore.getInstance(KeyStore.getDefaultType());
         caKs.load(null, null);
         caKs.setCertificateEntry("ca-certificate", ca);
        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
         tmf.init(caKs);
         caIn.close();
       CertificateFactory cf = CertificateFactory.getInstance("X.509");
       FileInputStream crtIn = new FileInputStream(crtPath);
        X509CertificatecaCert = (X509Certificate) cf.generateCertificate(crtIn);
 
        crtIn.close();
        // clientkey and certificatesare sent to server so it can authenticate
        // us
        KeyStore ks= KeyStore.getInstance(KeyStore.getDefaultType());
//      ks.load(caIn,password.toCharArray());
        ks.load(null, null);
        ks.setCertificateEntry("certificate", caCert);
        ks.setKeyEntry("private-key",getPrivateKey(keyPath), password.toCharArray(),
                newjava.security.cert.Certificate[]{caCert}  );
       KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
        kmf.init(ks, password.toCharArray());
//      keyIn.close();
 
        // finally,create SSL socket factory
        SSLContext context = SSLContext.getInstance("TLSv1");
 
        context.init(kmf.getKeyManagers(),tmf.getTrustManagers(), newSecureRandom());
 
        returncontext.getSocketFactory();
    }

3.获取私钥代码部分

由于只能读取PKCS8的格式，所以需要转成pem

   

 public PrivateKey getPrivateKey(String path) throws Exception{ 
 
 
 
       org.apache.commons.codec.binary.Base64 base64=new Base64();
        byte[] buffer=   base64.decode(getPem(path));
 
       PKCS8EncodedKeySpec keySpec= new PKCS8EncodedKeySpec(buffer);
        KeyFactorykeyFactory= KeyFactory.getInstance("RSA"); 
        return (RSAPrivateKey)keyFactory.generatePrivate(keySpec); 

    }

附录：

package com;
 
importjava.awt.BorderLayout;
importjava.awt.Container;
importjava.awt.event.ActionEvent;
importjava.awt.event.ActionListener;
importjava.io.BufferedReader;
importjava.io.FileInputStream;
import java.io.InputStream;
importjava.io.InputStreamReader;
importjava.security.KeyFactory;
importjava.security.KeyStore;
importjava.security.PrivateKey;
importjava.security.SecureRandom;
importjava.security.cert.CertificateException;
import java.security.cert.CertificateFactory;
importjava.security.cert.X509Certificate;
importjava.security.interfaces.RSAPrivateKey;
importjava.security.spec.PKCS8EncodedKeySpec;
 
importjavax.net.ssl.KeyManagerFactory;
importjavax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;
importjavax.net.ssl.TrustManager;
importjavax.net.ssl.TrustManagerFactory;
importjavax.net.ssl.X509TrustManager;
importjavax.swing.JButton;
importjavax.swing.JFrame;
importjavax.swing.JLabel;
importjavax.swing.JOptionPane;
import javax.swing.JPanel;
importjavax.swing.JTextArea;
 
importorg.apache.commons.codec.binary.Base64;
importorg.eclipse.paho.client.mqttv3.IMqttDeliveryToken;
importorg.eclipse.paho.client.mqttv3.MqttCallback;
importorg.eclipse.paho.client.mqttv3.MqttClient;
importorg.eclipse.paho.client.mqttv3.MqttConnectOptions;
importorg.eclipse.paho.client.mqttv3.MqttMessage;
importorg.eclipse.paho.client.mqttv3.MqttTopic;
importorg.eclipse.paho.client.mqttv3.internal.security.SSLSocketFactoryFactory;
import org.eclipse.paho.client.mqttv3.persist.MemoryPersistence;
 
publicclassServerextendsJFrame {
    privatestaticfinallongserialVersionUID = 1L;
    private JPanel panel;
    private JPanelpanelText;
    private JPanelpanelText2;
    private JButton button;
    private JButtonbutton2;
    private JButtonsubscribeButton;
    private JTextAreatextHost;
    private JTextAreatextClientID;
    private JTextAreatextPublishMsg;
    private JTextAreatextTopic;
 
    private MqttClientclient;
    private String host = "ssl://192.168.10.233:1883";
 
    private MqttTopictopic;
    private MqttMessagemessage;
 
    private StringuserToken = "999999";
 
    private StringmyTopicRoot = "test";
    private String myTopic= null;
 
    private String clienID= "test1234567";
 
    publicServer() {
 
        Containercontainer = this.getContentPane();
        panel = new JPanel();
        panelText =new JPanel();
        panelText2= new JPanel();
        button = new JButton("发布主题消息");
        button2 = new JButton("更换客户机地址和IP");
       button.addActionListener(new ActionListener() {
 
            @Override
            publicvoidactionPerformed(ActionEvent ae){
                try {
                   host = textHost.getText();
                   clienID = textClientID.getText();
                   if (client == null) {
                       client = newMqttClient(host, clienID, new MemoryPersistence());
                   }
 
                   if(!client.isConnected()) {
                       connect();
                   }
 
                   publishMsg(textTopic.getText(), textPublishMsg.getText());
                } catch (Exception e) {
                   e.printStackTrace();
                   showErrorMsg(e.toString());
                }
            }
        });
 
       button2.addActionListener(new ActionListener() {
 
            @Override
            publicvoidactionPerformed(ActionEventarg0) {
                // TODO Auto-generated method stub
               host = textHost.getText();
               clienID = textClientID.getText();
                try {
                   if (client != null)
                       client.disconnectForcibly();
                   client = newMqttClient(host, clienID, new MemoryPersistence());
                   connect();
                } catch (Exception e) {
                   e.printStackTrace();
                   showErrorMsg(e.toString());
                }
            }
        });
 
       subscribeButton = new JButton("订阅主题");
        subscribeButton.addActionListener(newActionListener() {
 
            @Override
            publicvoidactionPerformed(ActionEventarg0) {
                // TODO Auto-generated method stub
                try {
                   if (client == null) {
                       client = newMqttClient(host, clienID, new MemoryPersistence());
                   }
 
                   if(!client.isConnected()) {
                       connect();
                   }
                   if (myTopic != null &&!myTopic.equals(textTopic.getText())) {
                       client.subscribe(myTopic);
                   }
                   client.subscribe(textTopic.getText());
                   myTopic = textTopic.getText();
 
                } catch (Exception e) {
                   e.printStackTrace();
                   showErrorMsg(e.toString());
                }
            }
        });
 
        textHost = new JTextArea();
       textHost.setText(host);
       textClientID = new JTextArea();
       textClientID.setText(clienID);
 
       panel.add(button);
       panel.add(subscribeButton);
       panelText.add(button2);
       panelText.add(new JLabel("mqtt地址"));
       panelText.add(textHost);
       panelText.add(new JLabel("ClienId"));
       panelText.add(textClientID);
       panelText.add(new JLabel("主题"));
        textTopic =new JTextArea();
 
       textTopic.setText(myTopicRoot);
       panelText.add(textTopic);
 
       textPublishMsg = new JTextArea();
        textPublishMsg.setText("@" + userToken + "@E@5@" + userToken + "@");
       panelText2.add(new JLabel("mqtt消息"));
       panelText2.add(textPublishMsg);
 
       container.add(panel, BorderLayout.NORTH);
       container.add(panelText, BorderLayout.CENTER);
       container.add(panelText2, BorderLayout.SOUTH);
        // try {
        // client = new MqttClient(host,clienID,
        // new MemoryPersistence());
        // connect();
        // } catch (Exception e) {
        // showErrorMsg(e.toString());
        // }
    }
 
 
 
 
 
 
 
 
    privateSSLSocketFactory getSSLSocktet(StringcaPath,String crtPath, String keyPath, String password) throws Exception {
        // CA certificate is used toauthenticate server
        CertificateFactorycAf = CertificateFactory.getInstance("X.509");
       FileInputStream caIn = new FileInputStream(caPath);
       X509Certificate ca = (X509Certificate) cAf.generateCertificate(caIn);
         KeyStorecaKs = KeyStore.getInstance("JKS");
         caKs.load(null, null);
        caKs.setCertificateEntry("ca-certificate", ca);
        TrustManagerFactory tmf = TrustManagerFactory.getInstance("PKIX");
        tmf.init(caKs);
 
       CertificateFactory cf = CertificateFactory.getInstance("X.509");
       FileInputStream crtIn = new FileInputStream(crtPath);
       X509Certificate caCert = (X509Certificate)cf.generateCertificate(crtIn);
 
       crtIn.close();
        // client key and certificates are sentto server so it can authenticate
        // us
        KeyStore ks= KeyStore.getInstance(KeyStore.getDefaultType());
//      ks.load(caIn,password.toCharArray());
        ks.load(null, null);
       ks.setCertificateEntry("certificate", caCert);
       ks.setKeyEntry("private-key", getPrivateKey(keyPath),password.toCharArray(),
                newjava.security.cert.Certificate[]{caCert} );
       KeyManagerFactory kmf = KeyManagerFactory.getInstance("PKIX");
        kmf.init(ks, password.toCharArray());
//      keyIn.close();
 
        // finally, create SSL socket factory
        SSLContextcontext = SSLContext.getInstance("TLSv1");
 
       context.init(kmf.getKeyManagers(),tmf.getTrustManagers(), new SecureRandom());
 
        returncontext.getSocketFactory();
    }
 
 
 
 
 
    private String getPem(String path) throws Exception{
       FileInputStream fin=new FileInputStream(path);
       BufferedReader br= new BufferedReader(new InputStreamReader(fin)); 
        String readLine= null; 
       StringBuilder sb= new StringBuilder(); 
        while((readLine=br.readLine())!=null){ 
            if(readLine.charAt(0)=='-'){ 
                continue; 
            }else{ 
               sb.append(readLine); 
               sb.append('\r'); 
            } 
        } 
       fin.close();
        return sb.toString();
    }
 
    public PrivateKey getPrivateKey(String path) throws Exception{ 
 
       org.apache.commons.codec.binary.Base64 base64=new Base64();
        byte[] buffer=   base64.decode(getPem(path));
 
       PKCS8EncodedKeySpec keySpec= new PKCS8EncodedKeySpec(buffer);
        KeyFactorykeyFactory= KeyFactory.getInstance("RSA"); 
        return (RSAPrivateKey)keyFactory.generatePrivate(keySpec); 
 
 
    } 
 
 
 
    privatevoidconnect() {
 
       MqttConnectOptions options = new MqttConnectOptions();
       options.setCleanSession(false);
        // options.setUserName(userName);
        //options.setPassword(passWord.toCharArray());
        // 设置超时时间
        // options.setConnectionTimeout(10);
        // 设置会话心跳时间
        // options.setKeepAliveInterval(20);
        // try {
        // options.setWill("willtest","SENDgpslost".getBytes(), 1, false);
        // } catch (Exception e1) {
        // // TODO Auto-generated catch block
        // System.out.print(e1);
        // }
        try {
            if(!SSLSocketFactoryFactory.isSupportedOnJVM()) {
               System.out.print("isSupportedOnJVM=false");
            }
 
            SSLSocketFactoryfactory=getSSLSocktet("F:/ssl/ca.crt","F:/ssl/client.crt","F:/ssl/client.pem","brt123");
 
           options.setSocketFactory(factory);
           client.setCallback(new MqttCallback() {
 
                @Override
                publicvoidconnectionLost(Throwablecause) {
                   System.out.println("connectionLost-----------");
                }
 
                @Override
                publicvoiddeliveryComplete(IMqttDeliveryTokentoken) {
                   System.out.println("deliveryComplete---------" +token.isComplete());
                }
 
                @Override
                publicvoidmessageArrived(String topic,MqttMessage arg1) throws Exception {
                   System.out.println("messageArrived----------");
                   String msg = newString(arg1.getPayload());
                   showErrorMsg("主题：" + topic + "\r\n消息：" + msg);
                }
            });
 
            topic =client.getTopic(myTopicRoot + userToken);
            client.connect(options);
 
        } catch (Exception e) {
           e.printStackTrace();
        }
 
    }
 
    publicvoidpublishMsg(String topoc,String msg) {
        message = new MqttMessage();
       message.setQos(0);
       message.setRetained(false);
       System.out.println(message.isRetained() + "------ratained状态");
 
        try {
           message.setPayload(msg.getBytes("UTF-8"));
           client.publish(topoc, message);
        } catch (Exception e) {
            e.printStackTrace();
           showErrorMsg(e.toString());
        }
    }
 
    privatevoidshowErrorMsg(String msg) {
       JOptionPane.showMessageDialog(null, msg);
    }
 
}


 

shareinfo2018
关注
专栏目录
【项目实战】使用 Eclipse Paho Java 让Java应用程序中实现MQTT通信协议
本本本添哥
07-17 2020
Eclipse Paho Java 是一个开源的，功能强大，易于使用 的 MQTT 客户端库它提供了一个轻量级的客户端，用于在Java应用程序中实现MQTT通信协议的功能。它可帮助 Java 开发人员快速实现 MQTT 通信协议的功能。它提供多个 API，简化 MQTT 协议的实现和使用，并支持多种 MQTT 版本。使用Eclipse Paho Java可以轻松创建MQTT客户端，发送或接收消息。
python mqtt tls_如何使用python在paho mqtt中使用ssl / tls我获得证书验证失败
weixin_39980353的博客
12-11 1605
hi I am working on IOT internet of things I am using paho MQTT I need to use SSL I wrote publish code using python I got an error in "certificate verify failed"please help me thank in advanceMY PUBLI...
paho.mqtt.c使用openssl加密通讯
sy84436446的博客
01-06 992
paho.mqtt.c使用openssl加密通讯
Java使用MQTT协议
最新发布
dan_seek的博客
08-10 1461
MQTT（Message Queuing Telemetry Transport，消息队列遥测传输协议）是一种轻量级的、基于发布/订阅模式的物联网通信协议。它构建于TCP/IP协议之上，由IBM在1999年发布。MQTT协议通过简单的发布和订阅机制，实现了消息的可靠传输和分发，是物联网领域中的重要通信协议之一。
使用paho_mqtt_c库实现mqtt的ssl加密通讯
qq_38205154的博客
07-14 4961
最近做mqtt加密传输，做此笔记备忘 开源库版本：paho.mqtt.c-1.3.6.tar.gz 编译：将paho_mqtt_c/CMakeList.txt中：启用SSL编译 SET(PAHO_WITH_SSL TRUE CACHE BOOL "Flag that defines whether to build ssl-enabled binaries too. ") 编译为静态库： SET(PAHO_BUILD_SHAREDTRUECACHEBOOL"Buildsharedlib...
paho.mqtt链接openssl库实现ssl加密连接
weixin_43647723的博客
07-11 605
paho.mqtt.c通过ssl加密连接
[C/C++]vs2019下使用MQTT,基于库paho.mqtt.c编译并新建工程（使用SSL加密）
pysont的博客
07-31 1714
MQTT OPENSSL vs vs2019
mqtt paho ssl java端代码
lingshi210的专栏
09-05 6590
mqtt 的ssl配置可以参阅 http://houjixin.blog.163.com/blog/static/35628410201432205042955/mqtt的命令和Java端的ssl 必须同时要带上ca.crt、clilent.crt、client.key三个文件，即CA证书、客户证书、客户私钥。由于java 端不支持client.key的格式，需要命令进行转化openssl p
java 框架mqtt协议_使用JAVA版Paho框架开发原生MQTT接口
weixin_34902131的博客
02-25 1919
说明：阅读该文档之前需要对Mqtt有一定的了解，这里不对Mqtt知识作介绍，对Mqtt的了解请自行搜索学习。主要说明一下用一个简单的Demo样例，实现和IoT平台的对接，上报数据，下发命令等一、注册设备1. 开发中心 注册设备(1)查看产品信息产品信息中的 协议类型 必须为MQTT(2)注册设备设备管理—>新增真实设备—>选择上面开发好的产品—>接入方式选择 直连(3)注册设备成...
Android-AsyncMqttModule:使用 MQTT Paho for ANDROID 的异步中序消息传递
06-17
AsyncMqttModule 是 Paho Mqtt 库的包装器，用于连接 MQTT 代理并在其上执行其他操作。 该模块是为 Android 环境定制的。 以下是该项目的主要亮点。 所有操作都是异步的。 保持消息的顺序。 消息持久化是使用 ...
android MQTT 带SSL加密连接例子demo
06-26
在Android上，我们可以使用Paho MQTT客户端库，它是Apache Eclipse Paho项目的一部分，为多种语言提供了MQTT连接支持，包括Java和Android。 接下来，我们讨论SSL/TLS。SSL/TLS是网络通信中的安全标准，用于在客户端...
使用paho-mqtt-c做的mqtt通讯
08-12
本人使用paho-mqtt-c做的mqtt连接以及发布订阅功能，包含了遗嘱、自动重连、ssl加密等功能
paho_mqtt_demo.zip
12-31
最近一个项目需要写一个client连接mqtt的服务器，开发服务器的同事只提供了ip地址，用户名，密码，还有一份服务器生成的证书，pem格式的，最开始是用QMQTT库来写的，官方有，但是因为服务器是ip地址的，QMQTT的库没有ssl认证的可以用ip地址连接服务器，当服务器需要有ssl认证的时候只能用域名，所以失败了，后来参考了网上好多方法，最终测试，paho mqtt c ssl认证可行，我的环境是QT5.9.2+VS2015 64 bit的编译器，首先是参考http://www.brixbot.com/coding/mqtt-04-build-paho-c-for-windows/ 编译paho mqtt.c库，再参考http://www.brixbot.com/coding/mqtt-06-windows-paho-c-examples/写一个例子，但是他的例子不能直接用，需要更改一些参数，现在直接上传我的代码给大家参考，大家要改一下证书，证书放在程序的当前目录，修改你的账户密码就可以了
mosquitto paho ssl tls 最新版客户端连接mqtt服务器方式 2021
qq_42800337的博客
08-13 569
由于项目需求，需要写一个连接到mosquitto服务器的客户端，用的版本是 <dependency> <groupId>org.bouncycastle</groupId> <artifactId>bcprov-jdk15on</artifactId> <version>1.69</version> </dependency> <dependency> <grou
Java中使用MQTT客户端库实现TLS/SSL加密通信的示例
weixin_41544125的博客
03-30 1198
在使用MQTT进行通信时，可以通过TLS/SSL加密来确保消息在传输过程中的安全性。首先，你需要添加Eclipse Paho MQTT的依赖到你的项目中。如果你使用Maven，可以在。
Linux PAHO MQTT异步订阅与发布，没有SSL加密
weixin_48070323的博客
04-30 929
/用于设置当 MQTT 客户端发送的消息被成功接收到时调用的回调函数。// MQTT 客户端与 MQTT 服务器的连接丢失时调用的回调函数。//用于设置当 MQTT 客户端与 MQTT 服务器断开连接时调用的回调函数。//用于设置当 MQTT 客户端成功连接到 MQTT 服务器时调用的回调函数。//通过 MQTTAsync_create() 创建的 MQTT 客户端实例。注：如果不需要SSL校验，将DPAHO_WITH_SSL设为FALSE，DCMAKE_INSTALL_PREFIX不设置。
Paho Java Client 连接阿里云物联网平台
里查叔叔
06-28 1155
Paho Java Client 连接阿里云物联网平台 进入阿里云物联网平台->点击产品->新建 点击设备->添加设备 查看设备证书，复制记录，后面使用 阿里云TCP通信 一机一密、一型一密预注册认证方式：使用设备证书（ProductKey、DeviceName和DeviceSecret）连接。 mqttClientId: clientId+"|securemode=3,signmethod=hmacsha1,timestamp=132323232|" mqttUsername:
mqtt java ssl_mqtt paho ssl java端代码
weixin_32432759的博客
02-13 556
然后注意开启防火墙端口。mqtt的命令和Java端的ssl 必须同时要带上ca.crt、clilent.crt、client.key三个文件，即CA证书、客户证书、客户私钥。由于java 端不支持client.key的格式，需要命令进行转化openssl pkcs8 -topk8 -in client.key -out client.pem -nocrypt另外：不知为何ubuntu下关闭防火墙后...
Java使用ssl证书认证连接mqtt服务
half_bridge的博客
03-11 858
回调函数中引入业务层类，自动注解@Autowired 会使Spring容器无法加载，需手动引入bean。
帮我写一个websocket实现连接到mqtt服务器的java代码
06-11
在上面的代码中，我们使用了Java WebSocket API（`org.java_websocket`）来创建WebSocket客户端，并使用Eclipse Paho MQTT客户端库来连接到MQTT服务器。在`main`方法中，我们首先创建一个`WebSocketClient`来连接到...
评论 3
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值