RabbitMQ MQTT TLS相关配置 一、启用rabbitmq_mqtt插件及配置 1、启用rabbitmq_mqtt rabbitmq-plugins enable rabbitmq_mqtt 2、用户和身份验证 添加用户:rabbitmqctl add_user mqtt_chen mqtt_chen 添加用户角色:rabbitmqctl set_user_tags mqtt_chen management 添加虚拟主机:rabbitmqctl add_vhost vhost1 将用户添加到虚拟主机:rabbitmqctl set_permissions -p /vhost1 mqtt_chen”*” “*” “*” 3、rabbitmqctl常用命令 4、rabbitmq_mqtt配置 若etc/rabbitmq/rabbitmq.config 不存在,则cd /usr/share/doc/rabbitmq-server-3.7.10 拷贝一份:cp /rabbitmq.config.example /etc/rabbitmq/rabbitmq.config 编辑rabbitmq.config: vi /etc/rabbitmq/rabbitmq.config {rabbitmq_mqtt, [ {default_user, <<"guest">>}, {default_pass, <<"guest">>}, {loopback_users, []}, {allow_anonymous, true}, {vhost, <<"/">>}, {exchange, <<"amq.topic">>}, {subscription_ttl, 1800000}, {prefetch, 10}, {tcp_listeners, [1883]}, {ssl_listeners, [8883]}, {tcp_listen_options, [ {backlog, 128}, {nodelay, true}, {linger, {true, 0}}, {exit_on_close, false} ]} ]} 5、端口到虚拟主机映射 rabbitmqctl set_global_parameter mqtt_port_to_vhost_mapping \ ‘{“1883”:”vhost1”,”8883”:”vhost1”}’ 6、重启rabbitmq rabbitmq-server restart or rabbitmq-server stop, rabbitmqctl stop,rabbitmq-server start 二、启用rabbitmq TLS及配置 1、启用TLS 编辑rabbitmq.config: vi /etc/rabbitmq/rabbitmq.config {rabbit, [ {tcp_listeners, [5672]}, {ssl_listeners, [5671]}, {loopback_users, []}, {ssl_options, [ {cacertfile, "/path/to/ca_certificate_bundle.pem"}, {certfile, "/path/to/server_certificate.pem"}, {keyfile, "/path/to/server_key.pem"}, {verify, verify_peer}, {fail_if_no_peer_cert, false}]} ]} 2、手动为开发和QA环境生成自签名证书 2.1、testca mkdir testca cd testca mkdir certs private chmod 700 private echo 01> serial touch index.txt touch openssl.cnf 添加如下内容: [ ca ] default_ca = testca [ testca ] dir = . certificate = $dir/ca_certificate_bundle.pem database = $dir/index.txt new_certs_dir = $dir/certs private_key = $dir/private/ca_private_key.pem serial = $dir/serial default_crl_days = 7 default_days = 365 default_md = sha256 policy = testca_policy x509_extensions = certificate_extensions [ testca_policy ] commonName = supplied stateOrProvinceName = optional countryName = optional emailAddress = optional organizationName = optional organizationalUnitName = optional domainComponent = optional [ certificate_extensions ] basicConstraints = CA:false [ req ] default_bits = 2048 default_keyfile = ./private/ca_private_key.pem default_md = sha256 prompt = yes distinguished_name = root_ca_distinguished_name x509_extensions = root_ca_extensions [ root_ca_distinguished_name ] commonName = hostname [ root_ca_extensions ] basicConstraints = CA:true keyUsage = keyCertSign, cRLSign [ client_ca_extensions ] basicConstraints = CA:false keyUsage = digitalSignature,keyEncipherment extendedKeyUsage = 1.3.6.1.5.5.7.3.2 [ server_ca_extensions ] basicConstraints = CA:false keyUsage = digitalSignature,keyEncipherment extendedKeyUsage = 1.3.6.1.5.5.7.3.1 然后生成证书颁发机构将使用的密钥和证书: openssl req -x509 -config openssl.cnf -newkey rsa:2048 -days 365 \ -out ca_certificate_bundle.pem -outform PEM -subj /CN=MyTestCA/ -nodes openssl x509 -in ca_certificate_bundle.pem -out ca_certificate_bundle.cer -outform DER 2.2、server cd .. ls # => testca mkdir server cd server openssl genrsa -out private_key.pem 2048 openssl req -new -key private_key.pem -out req.pem -outform PEM \ -subj /CN=$(hostname)/O=server/ -nodes cd ../testca openssl ca -config openssl.cnf -in ../server/req.pem -out \ ../server/server_certificate.pem -notext -batch -extensions server_ca_extensions cd ../server openssl pkcs12 -export -out server_certificate.p12 -in server_certificate.pem -inkey private_key.pem \ -passout pass:MySecretPassword 2.3、client cd .. ls # => server testca mkdir client cd client openssl genrsa -out private_key.pem 2048 openssl req -new -key private_key.pem -out req.pem -outform PEM \ -subj /CN=$(hostname)/O=client/ -nodes cd ../testca openssl ca -config openssl.cnf -in ../client/req.pem -out \ ../client/client_certificate.pem -notext -batch -extensions client_ca_extensions cd ../client openssl pkcs12 -export -out client_certificate.p12 -in client_certificate.pem -inkey private_key.pem \ -passout pass:MySecretPassword
Rabbitmq.config总配置
[ {rabbit, [ {tcp_listeners, [5672]}, {ssl_listeners, [5671]}, {loopback_users, []}, {ssl_options, [{cacertfile, "/path/to/ca_certificate_bundle.pem"}, {certfile, "/path/to/server_certificate.pem"}, {keyfile, "/path/to/server_key.pem"}, {verify, verify_peer}, {fail_if_no_peer_cert, false}]} ]}, {rabbitmq_mqtt, [ {default_user, <<"guest">>}, {default_pass, <<"guest">>}, {loopback_users, []}, {allow_anonymous, true}, {vhost, <<"/">>}, {exchange, <<"amq.topic">>}, {subscription_ttl, 1800000}, {prefetch, 10}, {tcp_listeners, [1883]}, {ssl_listeners, [8883]}, {tcp_listen_options, [ {backlog, 128}, {nodelay, true}, {linger, {true, 0}}, {exit_on_close, false} ]} ]} ].
参考官网:
启用mqtt: http://www.rabbitmq.com/mqtt.html
启用TLS: http://www.rabbitmq.com/ssl.html
文章浏览阅读122次。还是A+BTime Limit: 2000/1000 MS (Java/Others)Memory Limit: 65536/32768 K (Java/Others)Total Submission(s): 24568Accepted Submission(s): 11729Problem Description读入两个小于10000的正整数A和B,计算A+B。...
文章浏览阅读419次。HEADERS:在BASIC的基础上,额外记录了请求和响应的头信息。FULL:记录所有请求和响应的明细,包括头信息、请求体、元数据。BASIC:仅记录请求的方法,URL以及响应状态码和执行时间。NONE:不记录任何日志信息,这是默认值。配置Feign日志有两种方式;方式二:java代码实现。注解中声明则代表某服务。方式一:配置文件方式。_feign 日志设置
文章浏览阅读155次。将容器管理的持久性 Bean 用于面向服务的体系结构本文将介绍如何使用 IBM WebSphere Process Server 对容器管理的持久性 (CMP) Bean的连接和持久性逻辑加以控制,使其可以存储在非关系数据库..._javax.ejb.objectnotfoundexception: no such entity!
文章浏览阅读1.5k次。基础java练习题一、递归实现跳台阶从第一级跳到第n级,有多少种跳法一次可跳一级,也可跳两级。还能跳三级import java.math.BigDecimal;import java.util.Scanner;public class Main{ public static void main(String[]args){ Scanner reader=new Scanner(System.in); while(reader.hasNext()){ _java 递归例题
文章浏览阅读1.5k次,点赞6次,收藏6次。目录1.串应用- 计算一个串的最长的真前后缀题目描述输入输出样例输入样例输出题解2.字符串替换(string)题目描述输入输出样例输入样例输出题解3.可重叠子串 (Ver. I)题目描述输入输出样例输入样例输出题解4.字符串操作(string)题目描述输入输出样例输入样例输出题解1.串应用- 计算一个串的最长的真前后缀题目描述给定一个串,如ABCDAB,则ABCDAB的真前缀有:{ A, AB,ABC, ABCD, ABCDA }ABCDAB的真后缀有:{ B, AB,DAB, CDAB, BCDAB_对存储在string数组内的所有以字符‘a’开始并以字符‘e’结尾的单词做加密处理。
文章浏览阅读68次。西安交通大学/算法设计与问题求解/树与二叉树/MOOC_算法设计与问题求解西安交通大学
文章浏览阅读1.6k次。问题:在Vue项目中出现如下错误提示:[Vue warn]: Computed property "totalPrice" was assigned to but it has no setter. (found in <Anonymous>)代码:<input v-model="totalPrice"/>原因:v-model命令,因Vue 的双向数据绑定原理 , 会自动操作 totalPrice, 对其进行set 操作而 totalPrice 作为计..._computed property "totalprice" was assigned to but it has no setter.
文章浏览阅读60次。十分暴力而简洁的解决方式:读取P和T的位置并自动生成唯一正确答案,将题给测点与之对比,不一样就给我爬!_basic 1003 case 1
文章浏览阅读422次。原标题:详解将Web项目War包部署到Tomcat服务器基本步骤详解将Web项目War包部署到Tomcat服务器基本步骤1 War包War包一般是在进行Web开发时,通常是一个网站Project下的所有源码的集合,里面包含前台HTML/CSS/JS的代码,也包含Java的代码。当开发人员在自己的开发机器上调试所有代码并通过后,为了交给测试人员测试和未来进行产品发布,都需要将开发人员的源码打包成Wa..._/opt/bosssoft/war/medical-web.war/web-inf/web.xml of module medical-web.war.
文章浏览阅读3k次,点赞3次,收藏13次。# -*- coding: utf-8 -*-# 简述:这里有四个数字,分别是:1、2、3、4#提问:能组成多少个互不相同且无重复数字的三位数?各是多少?def f(n):list=[]count=0for i in range(1,n+1):for j in range(1, n+1):for k in range(1, n+1):if i!=j and j!=k and i!=k:list.a..._python求从0到9任意组合成三位数数字不能重复并输出
文章浏览阅读1k次,点赞3次,收藏2次。<el-table-column prop="studentSex" label="性别" :formatter="sex"></el-table-column>然后就在vue的methods中写方法就OK了methods: { sex(row,index){ if(row.studentSex == 1){ return '男'; }else{ return '女'; }..._elementui table 性别
文章浏览阅读1.1k次。java文件操作之移动文件到指定的目录_java中怎么将pro.txt移动到design_mode_code根目录下