MQTT Essentials:A Lightweight IoT Protocol
上QQ阅读APP看书,第一时间看更新

Chapter 2. Securing an MQTT Mosquitto Server

In this chapter, we will secure a Mosquitto server. We will work with digital certificates to encrypt all the data sent between the MQTT clients and the server. To secure the server, we will:

  • Generate a private certificate authority to use TLS with Mosquitto
  • Create a certificate for the Mosquitto server
  • Configure TLS transport security in Mosquitto
  • Test the MQTT TLS configuration with MQTT.fx
  • Test the MQTT TLS configuration with MQTT-spy
  • Create a certificate for each MQTT client
  • Configure TLS client certificate authentication in Mosquitto
  • Test the MQTT TLS client authentication with MQTT.fx
  • Test the MQTT TLS configuration with MQTT-spy
  • Force the TLS protocol version