{"id":78091,"date":"2026-02-26T07:34:47","date_gmt":"2026-02-25T23:34:47","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/78091.html"},"modified":"2026-02-26T07:34:47","modified_gmt":"2026-02-25T23:34:47","slug":"emq-x-mqtt-%e6%9c%8d%e5%8a%a1%e5%99%a8-ssl-tls-%e5%ae%89%e5%85%a8%e8%bf%9e%e6%8e%a5%e5%ae%9e%e6%88%98%e6%8c%87%e5%8d%97","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/78091.html","title":{"rendered":"EMQ X MQTT \u670d\u52a1\u5668 SSL\/TLS \u5b89\u5168\u8fde\u63a5\u5b9e\u6218\u6307\u5357"},"content":{"rendered":"<h3>1. \u4e3a\u4ec0\u4e48\u4f60\u7684MQTT\u8fde\u63a5\u9700\u8981\u201c\u4e0a\u9501\u201d&#xff1f;\u804a\u804aSSL\/TLS\u7684\u91cd\u8981\u6027<\/h3>\n<p>\u6211\u521a\u5f00\u59cb\u63a5\u89e6\u7269\u8054\u7f51\u9879\u76ee\u7684\u65f6\u5019&#xff0c;\u603b\u89c9\u5f97\u8bbe\u5907\u80fd\u8fde\u4e0a\u670d\u52a1\u5668\u3001\u80fd\u6536\u53d1\u6570\u636e\u5c31\u4e07\u4e8b\u5927\u5409\u4e86\u3002\u76f4\u5230\u6709\u4e00\u6b21&#xff0c;\u6211\u4eec\u4e00\u4e2a\u667a\u80fd\u5bb6\u5c45\u7684\u6d4b\u8bd5\u9879\u76ee&#xff0c;\u88ab\u9694\u58c1\u5de5\u4f4d\u7684\u540c\u4e8b\u7528\u4e2a\u7b80\u5355\u7684\u6293\u5305\u5de5\u5177&#xff0c;\u5c31\u628a\u6240\u6709\u8bbe\u5907\u7684\u5f00\u5173\u6307\u4ee4\u3001\u6e29\u5ea6\u6570\u636e\u770b\u5f97\u4e00\u6e05\u4e8c\u695a&#xff0c;\u90a3\u4e00\u523b\u771f\u662f\u540e\u80cc\u53d1\u51c9\u3002\u4f60\u60f3\u60f3&#xff0c;\u5982\u679c\u8fd9\u662f\u771f\u5b9e\u7684\u5bb6\u5ead\u73af\u5883&#xff0c;\u4f60\u5bb6\u7684\u7a7a\u8c03\u5f00\u5173\u3001\u95e8\u7a97\u72b6\u6001\u751a\u81f3\u6444\u50cf\u5934\u753b\u9762&#xff0c;\u90fd\u80fd\u88ab\u522b\u4eba\u968f\u610f\u7aa5\u63a2&#xff0c;\u8fd9\u5b89\u5168\u6f0f\u6d1e\u53ef\u5c31\u5927\u4e86\u3002\u6240\u4ee5&#xff0c;\u7ed9MQTT\u901a\u4fe1\u201c\u4e0a\u628a\u9501\u201d&#xff0c;\u4e5f\u5c31\u662f\u542f\u7528SSL\/TLS&#xff0c;\u7edd\u4e0d\u662f\u53ef\u6709\u53ef\u65e0\u7684\u9009\u4fee\u8bfe&#xff0c;\u800c\u662f\u4fdd\u62a4\u4f60\u6570\u636e\u9690\u79c1\u548c\u7cfb\u7edf\u5b89\u5168\u7684\u5fc5\u4fee\u8bfe\u3002<\/p>\n<p>\u7b80\u5355\u6765\u8bf4&#xff0c;MQTT\u672c\u8eab\u662f\u4e00\u79cd\u8f7b\u91cf\u7ea7\u7684\u6d88\u606f\u534f\u8bae&#xff0c;\u5b83\u8bbe\u8ba1\u4e4b\u521d\u4e3a\u4e86\u9ad8\u6548\u548c\u4f4e\u529f\u8017&#xff0c;\u5e76\u6ca1\u6709\u5185\u7f6e\u590d\u6742\u7684\u5b89\u5168\u673a\u5236\u3002\u6570\u636e\u5728\u7f51\u7edc\u4e2d\u4f20\u8f93&#xff0c;\u5c31\u50cf\u660e\u4fe1\u7247\u4e00\u6837&#xff0c;\u8c01\u90fd\u80fd\u770b\u5230\u4e0a\u9762\u7684\u5185\u5bb9\u3002\u800cSSL\/TLS\u534f\u8bae&#xff0c;\u5c31\u662f\u7ed9\u8fd9\u5f20\u201c\u660e\u4fe1\u7247\u201d\u5957\u4e0a\u4e86\u4e00\u4e2a\u53ea\u6709\u6536\u53d1\u53cc\u65b9\u624d\u6709\u94a5\u5319\u7684\u52a0\u5bc6\u4fe1\u5c01\u3002\u5b83\u4e3b\u8981\u89e3\u51b3\u4e86\u4e09\u4e2a\u6838\u5fc3\u95ee\u9898&#xff1a;\u8eab\u4efd\u8ba4\u8bc1\u3001\u6570\u636e\u52a0\u5bc6\u548c\u5b8c\u6574\u6027\u6821\u9a8c\u3002\u8eab\u4efd\u8ba4\u8bc1\u786e\u4fdd\u4f60\u8fde\u63a5\u7684\u662f\u771f\u6b63\u7684\u670d\u52a1\u5668&#xff0c;\u800c\u4e0d\u662f\u9ed1\u5ba2\u4f2a\u9020\u7684\u201c\u9493\u9c7c\u201d\u670d\u52a1\u5668&#xff1b;\u6570\u636e\u52a0\u5bc6\u8ba9\u4f20\u8f93\u7684\u5185\u5bb9\u53d8\u6210\u4e00\u5806\u4e71\u7801&#xff0c;\u5373\u4f7f\u88ab\u622a\u83b7\u4e5f\u65e0\u6cd5\u89e3\u8bfb&#xff1b;\u5b8c\u6574\u6027\u6821\u9a8c\u5219\u4fdd\u8bc1\u6570\u636e\u5728\u4f20\u8f93\u8fc7\u7a0b\u4e2d\u6ca1\u6709\u88ab\u7be1\u6539\u8fc7&#xff0c;\u6bd4\u5982\u628a\u201c\u5173\u95ed\u9600\u95e8\u201d\u7684\u6307\u4ee4\u6539\u6210\u201c\u6253\u5f00\u9600\u95e8\u201d\u3002<\/p>\n<p>\u5bf9\u4e8eEMQ X\u8fd9\u6837\u7684MQTT\u6d88\u606f\u670d\u52a1\u5668\u6765\u8bf4&#xff0c;\u542f\u7528SSL\/TLS\u610f\u5473\u7740\u4f60\u53ef\u4ee5\u4e3a\u6240\u6709\u63a5\u5165\u7684\u8bbe\u5907&#xff08;\u65e0\u8bba\u662f\u5355\u7247\u673a\u3001\u624b\u673aApp\u8fd8\u662f\u540e\u7aef\u670d\u52a1&#xff09;\u5efa\u7acb\u4e00\u4e2a\u53ef\u4fe1\u3001\u79c1\u5bc6\u7684\u901a\u4fe1\u901a\u9053\u3002\u65e0\u8bba\u662f\u667a\u80fd\u7535\u8868\u4e0a\u4f20\u7684\u7528\u7535\u6570\u636e&#xff0c;\u8fd8\u662f\u8f66\u8f7d\u7ec8\u7aef\u53d1\u9001\u7684GPS\u4f4d\u7f6e&#xff0c;\u90fd\u80fd\u5f97\u5230\u6709\u6548\u4fdd\u62a4\u3002\u8fd9\u4e0d\u4ec5\u4ec5\u662f\u6280\u672f\u5408\u89c4\u7684\u8981\u6c42&#xff0c;\u66f4\u662f\u5bf9\u7528\u6237\u9690\u79c1\u548c\u4e1a\u52a1\u5b89\u5168\u7684\u8d1f\u8d23\u3002\u63a5\u4e0b\u6765&#xff0c;\u6211\u5c31\u624b\u628a\u624b\u5e26\u4f60\u8d70\u4e00\u904d\u4ece\u8bc1\u4e66\u51c6\u5907\u5230\u8fde\u63a5\u6d4b\u8bd5\u7684\u5b8c\u6574\u6d41\u7a0b&#xff0c;\u4f60\u4f1a\u53d1\u73b0&#xff0c;\u7ed9EMQ X\u201c\u4e0a\u9501\u201d\u5176\u5b9e\u6ca1\u60f3\u8c61\u4e2d\u90a3\u4e48\u590d\u6742\u3002<\/p>\n<h3>2. \u5b9e\u6218\u7b2c\u4e00\u6b65&#xff1a;\u641e\u5b9a\u4f60\u7684\u201c\u6570\u5b57\u8eab\u4efd\u8bc1\u201d\u2014\u2014\u8bc1\u4e66\u51c6\u5907\u5168\u653b\u7565<\/h3>\n<p>\u8981\u7ed9\u901a\u4fe1\u52a0\u5bc6&#xff0c;\u9996\u5148\u5f97\u6709\u4e2a\u201c\u6570\u5b57\u8eab\u4efd\u8bc1\u201d&#xff0c;\u4e5f\u5c31\u662f\u8bc1\u4e66\u3002\u8fd9\u5c31\u50cf\u73b0\u5b9e\u4e16\u754c\u91cc&#xff0c;\u4f60\u8981\u8bc1\u660e\u201c\u4f60\u662f\u4f60\u201d&#xff0c;\u9700\u8981\u51fa\u793a\u8eab\u4efd\u8bc1&#xff0c;\u800c\u516c\u5b89\u5c40\u5c31\u662f\u9881\u53d1\u673a\u6784&#xff08;CA&#xff09;\u3002\u5728TLS\u4e16\u754c\u91cc&#xff0c;\u670d\u52a1\u5668\u4e5f\u9700\u8981\u4e00\u4e2a\u7531\u53ef\u4fe1CA\u9881\u53d1\u7684\u8bc1\u4e66&#xff0c;\u6765\u5411\u5ba2\u6237\u7aef\u8bc1\u660e\u201c\u6211\u662f\u771f\u6b63\u7684\u670d\u52a1\u5668\u201d\u3002\u8fd9\u91cc\u6211\u4eec\u901a\u5e38\u4f1a\u9047\u5230\u4e24\u79cd\u573a\u666f&#xff1a;\u4f7f\u7528\u6743\u5a01\u673a\u6784\u8d2d\u4e70\u7684\u8bc1\u4e66&#xff0c;\u6216\u8005\u81ea\u5df1\u5728\u5185\u7f51\u6d4b\u8bd5\u65f6\u751f\u6210\u81ea\u7b7e\u540d\u8bc1\u4e66\u3002<\/p>\n<h4>2.1 \u65b9\u6848A&#xff1a;\u4f7f\u7528\u53d7\u4fe1\u4efb\u7684\u6743\u5a01CA\u8bc1\u4e66&#xff08;\u751f\u4ea7\u73af\u5883\u9996\u9009&#xff09;<\/h4>\n<p>\u5982\u679c\u4f60\u7684\u670d\u52a1\u662f\u5bf9\u516c\u7f51\u7528\u6237\u63d0\u4f9b\u7684&#xff0c;\u6bd4\u5982\u4e00\u4e2a\u5546\u4e1a\u5316\u7684\u7269\u8054\u7f51SaaS\u5e73\u53f0&#xff0c;\u90a3\u4e48\u4f60\u5fc5\u987b\u4f7f\u7528\u50cfDigiCert\u3001GlobalSign\u3001Let\u2018s Encrypt&#xff08;\u514d\u8d39&#xff09;\u8fd9\u7c7b\u6743\u5a01CA\u7b7e\u53d1\u7684\u8bc1\u4e66\u3002\u7528\u6237\u8bbe\u5907&#xff08;\u5982\u624b\u673aApp&#xff09;\u7684\u64cd\u4f5c\u7cfb\u7edf\u6216\u6d4f\u89c8\u5668\u91cc\u5df2\u7ecf\u5185\u7f6e\u4e86\u8fd9\u4e9b\u6743\u5a01CA\u7684\u6839\u8bc1\u4e66&#xff0c;\u6240\u4ee5\u80fd\u81ea\u52a8\u4fe1\u4efb\u7531\u5b83\u4eec\u7b7e\u53d1\u7684\u670d\u52a1\u5668\u8bc1\u4e66&#xff0c;\u8fde\u63a5\u65f6\u4e0d\u4f1a\u51fa\u73b0\u5b89\u5168\u8b66\u544a\u3002\u8d2d\u4e70\u6216\u7533\u8bf7\u5230\u8bc1\u4e66\u540e&#xff0c;\u4f60\u901a\u5e38\u4f1a\u5f97\u5230\u4e00\u4e2a\u8bc1\u4e66\u6587\u4ef6&#xff08;\u53ef\u80fd\u662f.crt\u6216.pem\u683c\u5f0f&#xff09;\u548c\u4e00\u4e2a\u79c1\u94a5\u6587\u4ef6&#xff08;.key\u683c\u5f0f&#xff09;\u3002\u4e3a\u4e86\u540e\u7eed\u914d\u7f6e\u65b9\u4fbf&#xff0c;\u6211\u4e60\u60ef\u5c06\u5b83\u4eec\u91cd\u547d\u540d\u4e3aemqx.crt\u548cemqx.key&#xff0c;\u7136\u540e\u653e\u5230EMQ X\u670d\u52a1\u5668\u6307\u5b9a\u7684\u76ee\u5f55\u4e0b\u5373\u53ef\u3002\u8fd9\u4e2a\u65b9\u6848\u7684\u4f18\u52bf\u662f\u7701\u5fc3\u3001\u901a\u7528&#xff0c;\u5ba2\u6237\u7aef\u65e0\u9700\u989d\u5916\u914d\u7f6e&#xff0c;\u662f\u9762\u5411\u516c\u4f17\u670d\u52a1\u7684\u6807\u51c6\u505a\u6cd5\u3002<\/p>\n<h4>2.2 \u65b9\u6848B&#xff1a;\u81ea\u5df1\u52a8\u624b\u5236\u4f5c\u81ea\u7b7e\u540d\u8bc1\u4e66&#xff08;\u6d4b\u8bd5\/\u5185\u7f51\u73af\u5883&#xff09;<\/h4>\n<p>\u5728\u5f00\u53d1\u6d4b\u8bd5\u3001\u6216\u8005\u5c01\u95ed\u7684\u5185\u7f51\u7269\u8054\u7f51\u73af\u5883\u4e2d&#xff0c;\u7533\u8bf7\u4ed8\u8d39\u8bc1\u4e66\u53ef\u80fd\u6bd4\u8f83\u9ebb\u70e6&#xff0c;\u8fd9\u65f6\u81ea\u7b7e\u540d\u8bc1\u4e66\u5c31\u6d3e\u4e0a\u7528\u573a\u4e86\u3002\u4f60\u53ef\u4ee5\u628a\u81ea\u5df1\u5f53\u6210\u201c\u516c\u5b89\u5c40\u201d&#xff0c;\u81ea\u5df1\u7b7e\u53d1\u8bc1\u4e66\u3002\u867d\u7136\u5ba2\u6237\u7aef\u4e0d\u4f1a\u81ea\u52a8\u4fe1\u4efb\u4f60\u8fd9\u5bb6\u201c\u81ea\u5c01\u7684CA\u201d&#xff0c;\u4f46\u6211\u4eec\u53ef\u4ee5\u901a\u8fc7\u624b\u52a8\u5c06\u81ea\u7b7e\u540d\u7684CA\u8bc1\u4e66\u5b89\u88c5\u5230\u5ba2\u6237\u7aef\u6765\u89e3\u51b3\u4fe1\u4efb\u95ee\u9898\u3002\u6574\u4e2a\u8fc7\u7a0b\u4f9d\u8d56OpenSSL\u5de5\u5177&#xff0c;\u5927\u90e8\u5206Linux\/macOS\u7cfb\u7edf\u90fd\u81ea\u5e26&#xff0c;Windows\u4e0a\u4e5f\u53ef\u4ee5\u8f7b\u677e\u5b89\u88c5\u3002<\/p>\n<p>\u9996\u5148&#xff0c;\u6211\u4eec\u9700\u8981\u521b\u5efa\u81ea\u5df1\u7684\u6839CA&#xff08;\u8bc1\u4e66\u9881\u53d1\u673a\u6784&#xff09;\u3002\u8fd9\u76f8\u5f53\u4e8e\u6210\u7acb\u4e00\u5bb6\u81ea\u5df1\u7684\u201c\u8bc1\u4e66\u516c\u5b89\u5c40\u201d\u3002\u6253\u5f00\u7ec8\u7aef&#xff0c;\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\u751f\u6210CA\u7684\u79c1\u94a5&#xff0c;2048\u6307\u5b9a\u4e86\u5bc6\u94a5\u957f\u5ea6&#xff0c;\u5b89\u5168\u6027\u8db3\u591f&#xff1a;<\/p>\n<p>openssl genrsa -out my_root_ca.key 2048<\/p>\n<p>\u63a5\u7740&#xff0c;\u7528\u8fd9\u4e2a\u79c1\u94a5\u751f\u6210\u81ea\u7b7e\u540d\u7684\u6839CA\u8bc1\u4e66\u3002-days 3650\u8868\u793a\u8bc1\u4e6610\u5e74\u5185\u6709\u6548&#xff0c;\u4f60\u53ef\u4ee5\u6309\u9700\u8c03\u6574&#xff1a;<\/p>\n<p>openssl req -x509 -new -nodes -key my_root_ca.key -sha256 -days 3650 -out my_root_ca.pem<\/p>\n<p>\u6267\u884c\u8fd9\u4e2a\u547d\u4ee4\u65f6&#xff0c;\u4f1a\u4ea4\u4e92\u5f0f\u5730\u8ba9\u4f60\u8f93\u5165\u4e00\u4e9b\u56fd\u5bb6\u3001\u5730\u533a\u3001\u7ec4\u7ec7\u7b49\u4fe1\u606f&#xff0c;\u8fd9\u4e9b\u4f1a\u4f53\u73b0\u5728\u8bc1\u4e66\u91cc\u3002\u5bf9\u4e8e\u6d4b\u8bd5&#xff0c;\u4e00\u8def\u56de\u8f66\u7528\u9ed8\u8ba4\u503c\u4e5f\u884c\u3002<\/p>\n<p>\u6709\u4e86\u201c\u516c\u5b89\u5c40\u201d&#xff08;\u6839CA&#xff09;&#xff0c;\u73b0\u5728\u6211\u4eec\u8981\u4e3aEMQ X\u670d\u52a1\u5668\u8fd9\u4e2a\u201c\u516c\u6c11\u201d\u9881\u53d1\u201c\u8eab\u4efd\u8bc1\u201d\u4e86\u3002\u540c\u6837&#xff0c;\u5148\u4e3a\u670d\u52a1\u5668\u751f\u6210\u4e00\u5bf9\u79c1\u94a5&#xff1a;<\/p>\n<p>openssl genrsa -out emqx.key 2048<\/p>\n<p>\u7136\u540e&#xff0c;\u6211\u4eec\u9700\u8981\u521b\u5efa\u4e00\u4e2a\u914d\u7f6e\u6587\u4ef6&#xff08;\u6bd4\u5982\u53ebopenssl.cnf&#xff09;&#xff0c;\u6765\u5b9a\u4e49\u8bc1\u4e66\u7684\u4e00\u4e9b\u6269\u5c55\u5c5e\u6027&#xff0c;\u6700\u5173\u952e\u7684\u662fsubjectAltName&#xff08;\u4e3b\u9898\u5907\u7528\u540d\u79f0&#xff09;&#xff0c;\u5b83\u6307\u660e\u4e86\u8bc1\u4e66\u5bf9\u54ea\u4e9b\u57df\u540d\u6216IP\u5730\u5740\u6709\u6548\u3002\u8fd9\u4e2a\u6587\u4ef6\u5185\u5bb9\u5982\u4e0b&#xff0c;\u52a1\u5fc5\u628aBROKER_ADDRESS\u66ff\u6362\u6210\u4f60EMQ X\u670d\u52a1\u5668\u7684\u5b9e\u9645IP\u6216\u57df\u540d&#xff1a;<\/p>\n<p>[req]<br \/>\ndefault_bits &#061; 2048<br \/>\ndistinguished_name &#061; req_distinguished_name<br \/>\nreq_extensions &#061; req_ext<br \/>\nx509_extensions &#061; v3_req<br \/>\nprompt &#061; no<\/p>\n<p>[req_distinguished_name]<br \/>\ncountryName &#061; CN<br \/>\nstateOrProvinceName &#061; Zhejiang<br \/>\nlocalityName &#061; Hangzhou<br \/>\norganizationName &#061; EMQX<br \/>\ncommonName &#061; Server certificate<\/p>\n<p>[req_ext]<br \/>\nsubjectAltName &#061; &#064;alt_names<\/p>\n<p>[v3_req]<br \/>\nsubjectAltName &#061; &#064;alt_names<\/p>\n<p>[alt_names]<br \/>\nIP.1 &#061; BROKER_ADDRESS<br \/>\nDNS.1 &#061; BROKER_ADDRESS<\/p>\n<p>\u63a5\u4e0b\u6765&#xff0c;\u7528\u670d\u52a1\u5668\u7684\u79c1\u94a5\u548c\u8fd9\u4e2a\u914d\u7f6e\u751f\u6210\u4e00\u4e2a\u8bc1\u4e66\u7b7e\u540d\u8bf7\u6c42&#xff08;CSR&#xff09;\u6587\u4ef6&#xff0c;\u8fd9\u76f8\u5f53\u4e8e\u63d0\u4ea4\u4e86\u4e00\u4efd\u201c\u529e\u8bc1\u7533\u8bf7\u201d&#xff1a;<\/p>\n<p>openssl req -new -key .\/emqx.key -config openssl.cnf -out emqx.csr<\/p>\n<p>\u6700\u540e&#xff0c;\u7528\u6211\u4eec\u81ea\u5df1\u7684\u6839CA\u6765\u7b7e\u7f72\u8fd9\u4efd\u7533\u8bf7&#xff0c;\u751f\u6210\u6700\u7ec8\u7684\u670d\u52a1\u5668\u8bc1\u4e66emqx.pem&#xff1a;<\/p>\n<p>openssl x509 -req -in .\/emqx.csr -CA my_root_ca.pem -CAkey my_root_ca.key -CAcreateserial -out emqx.pem -days 3650 -sha256 -extensions v3_req -extfile openssl.cnf<\/p>\n<p>\u5230\u6b64&#xff0c;\u4f60\u5c31\u62e5\u6709\u4e86\u4e09\u4e2a\u5173\u952e\u6587\u4ef6&#xff1a;my_root_ca.pem&#xff08;\u81ea\u5efaCA\u7684\u6839\u8bc1\u4e66&#xff09;\u3001emqx.key&#xff08;\u670d\u52a1\u5668\u79c1\u94a5&#xff09;\u548cemqx.pem&#xff08;\u670d\u52a1\u5668\u8bc1\u4e66&#xff09;\u3002\u628a\u5b83\u4eec\u4fdd\u7ba1\u597d&#xff0c;\u4e0b\u4e00\u6b65\u914d\u7f6eEMQ X\u5c31\u4f1a\u7528\u5230\u3002<\/p>\n<h3>3. \u6838\u5fc3\u914d\u7f6e&#xff1a;\u8ba9EMQ X\u201c\u542c\u61c2\u201d\u52a0\u5bc6\u6307\u4ee4<\/h3>\n<p>\u8bc1\u4e66\u51c6\u5907\u597d\u4e4b\u540e&#xff0c;\u4e0b\u4e00\u6b65\u5c31\u662f\u544a\u8bc9EMQ X\u5982\u4f55\u4f7f\u7528\u8fd9\u4e9b\u8bc1\u4e66\u6765\u542f\u7528TLS\u76d1\u542c\u3002EMQ X\u7684\u914d\u7f6e\u4e3b\u8981\u96c6\u4e2d\u5728\u4e00\u4e2a\u53ebemqx.conf\u7684\u6587\u4ef6\u91cc&#xff0c;\u8fd9\u4e2a\u6587\u4ef6\u901a\u5e38\u4f4d\u4e8eEMQ X\u5b89\u88c5\u76ee\u5f55\u7684etc\/\u6587\u4ef6\u5939\u4e0b\u3002\u6211\u4eec\u9700\u8981\u627e\u5230\u548cSSL\/TLS\u76d1\u542c\u5668\u76f8\u5173\u7684\u914d\u7f6e\u9879\u8fdb\u884c\u4fee\u6539\u3002<\/p>\n<p>\u9996\u5148&#xff0c;\u65e0\u8bba\u4f60\u7528\u54ea\u79cd\u8bc1\u4e66&#xff0c;\u90fd\u9700\u8981\u5148\u786e\u5b9aTLS\u670d\u52a1\u7684\u76d1\u542c\u7aef\u53e3\u3002EMQ X\u9ed8\u8ba4\u7ed9MQTT over SSL\/TLS\u9884\u7559\u7684\u7aef\u53e3\u662f8883&#xff0c;\u8fd9\u662f\u4e00\u4e2a\u4e1a\u754c\u901a\u7528\u6807\u51c6\u7aef\u53e3&#xff0c;\u5c31\u50cfHTTP\u752880\u3001HTTPS\u7528443\u4e00\u6837\u3002\u5f53\u7136&#xff0c;\u4f60\u4e5f\u53ef\u4ee5\u6839\u636e\u5b9e\u9645\u60c5\u51b5\u6539\u6210\u5176\u4ed6\u7aef\u53e3\u3002\u914d\u7f6e\u9879\u662flistener.ssl.external&#xff0c;\u5b83\u5b9a\u4e49\u4e86\u76d1\u542c\u5730\u5740\u548c\u7aef\u53e3\u3002\u5982\u679c\u53ea\u60f3\u76d1\u542c\u6240\u6709\u7f51\u5361&#xff0c;\u53ef\u4ee5\u53ea\u5199\u7aef\u53e3\u53f7&#xff1a;<\/p>\n<p>## listener.ssl.$name is the IP address and port that the MQTT\/SSL<br \/>\n## Value: IP:Port | Port<br \/>\nlistener.ssl.external &#061; 8883<\/p>\n<h4>3.1 \u914d\u7f6e\u65b9\u6cd5\u4e00&#xff1a;\u4f7f\u7528\u8d2d\u4e70\u7684\u6743\u5a01\u8bc1\u4e66<\/h4>\n<p>\u5982\u679c\u4f60\u7528\u7684\u662f\u4ece\u6743\u5a01CA\u8d2d\u4e70\u7684\u8bc1\u4e66&#xff08;\u6bd4\u5982\u91cd\u547d\u540d\u540e\u7684emqx.crt\u548cemqx.key&#xff09;&#xff0c;\u914d\u7f6e\u76f8\u5bf9\u7b80\u5355\u3002\u4f60\u9700\u8981\u628a\u8fd9\u4e24\u4e2a\u6587\u4ef6\u4e0a\u4f20\u5230EMQ X\u670d\u52a1\u5668\u7684\u67d0\u4e2a\u76ee\u5f55&#xff0c;\u6211\u4e00\u822c\u5c31\u653e\u5728etc\/certs\/\u4e0b&#xff0c;\u65b9\u4fbf\u7ba1\u7406\u3002\u7136\u540e\u5728emqx.conf\u4e2d\u6307\u5b9a\u5b83\u4eec\u7684\u8def\u5f84&#xff1a;<\/p>\n<p>## Path to the file containing the user&#039;s private PEM-encoded key.<br \/>\n## Value: File<br \/>\nlistener.ssl.external.keyfile &#061; etc\/certs\/emqx.key<\/p>\n<p>## Path to a file containing the user certificate.<br \/>\n## Value: File<br \/>\nlistener.ssl.external.certfile &#061; etc\/certs\/emqx.crt<\/p>\n<p>\u8fd9\u91cc\u53ea\u9700\u8981\u6307\u5b9a\u670d\u52a1\u5668\u81ea\u5df1\u7684\u79c1\u94a5\u548c\u8bc1\u4e66\u6587\u4ef6\u3002\u56e0\u4e3a\u4f60\u7684\u8bc1\u4e66\u662f\u7531\u5168\u7403\u516c\u8ba4\u7684CA\u7b7e\u53d1\u7684&#xff0c;\u5ba2\u6237\u7aef&#xff08;\u6bd4\u5982\u624b\u673a\u3001\u6d4f\u89c8\u5668&#xff09;\u81ea\u5df1\u5df2\u7ecf\u5185\u7f6e\u4e86\u8fd9\u4e9bCA\u7684\u6839\u8bc1\u4e66&#xff0c;\u6240\u4ee5\u4e0d\u9700\u8981\u5728EMQ X\u7aef\u989d\u5916\u914d\u7f6eCA\u8bc1\u4e66\u6587\u4ef6\u3002\u914d\u7f6e\u5b8c\u6210\u540e&#xff0c;\u4fdd\u5b58emqx.conf\u6587\u4ef6\u3002<\/p>\n<h4>3.2 \u914d\u7f6e\u65b9\u6cd5\u4e8c&#xff1a;\u4f7f\u7528\u81ea\u7b7e\u540d\u8bc1\u4e66<\/h4>\n<p>\u5982\u679c\u4f60\u7528\u7684\u662f\u81ea\u5df1\u751f\u6210\u7684\u81ea\u7b7e\u540d\u8bc1\u4e66&#xff0c;\u914d\u7f6e\u4f1a\u591a\u4e00\u6b65&#xff0c;\u56e0\u4e3a\u4f60\u9700\u8981\u544a\u8bc9EMQ X&#xff0c;\u8be5\u7528\u54ea\u4e2aCA\u8bc1\u4e66\u6765\u9a8c\u8bc1\u5ba2\u6237\u7aef\u643a\u5e26\u7684\u8bc1\u4e66&#xff08;\u5982\u679c\u662f\u53cc\u5411\u8ba4\u8bc1&#xff09;&#xff0c;\u6216\u8005\u66f4\u5173\u952e\u7684\u662f&#xff0c;\u5728\u4e00\u4e9b\u914d\u7f6e\u4e0b\u9700\u8981\u660e\u786eCA\u94fe\u3002\u5bf9\u4e8e\u5355\u5411\u8ba4\u8bc1&#xff0c;\u867d\u7136\u5ba2\u6237\u7aef\u9a8c\u8bc1\u670d\u52a1\u5668\u65f6\u9700\u8981\u6211\u4eec\u7684CA\u8bc1\u4e66&#xff0c;\u4f46\u8fd9\u4e2aCA\u8bc1\u4e66\u901a\u5e38\u662f\u653e\u5728\u5ba2\u6237\u7aef\u4fa7\u7684&#xff0c;\u670d\u52a1\u5668\u7aef\u914d\u7f6eCA\u8bc1\u4e66\u4e3b\u8981\u662f\u4e3a\u4e86\u540e\u7eed\u53ef\u80fd\u7684\u53cc\u5411\u8ba4\u8bc1\u505a\u51c6\u5907\u3002\u4f46\u6309\u7167\u5e38\u89c1\u505a\u6cd5\u548c\u4fdd\u6301\u914d\u7f6e\u5b8c\u6574&#xff0c;\u6211\u4eec\u901a\u5e38\u4f1a\u628aCA\u8bc1\u4e66\u4e5f\u914d\u4e0a\u53bb\u3002\u4f60\u9700\u8981\u628a\u4e4b\u524d\u751f\u6210\u7684emqx.pem&#xff08;\u670d\u52a1\u5668\u8bc1\u4e66&#xff09;\u3001emqx.key&#xff08;\u670d\u52a1\u5668\u79c1\u94a5&#xff09;\u548cmy_root_ca.pem&#xff08;\u81ea\u5df1\u7684\u6839CA\u8bc1\u4e66&#xff09;\u90fd\u653e\u5230etc\/certs\/\u76ee\u5f55\u3002<\/p>\n<p>\u7136\u540e\u5728emqx.conf\u4e2d&#xff0c;\u9664\u4e86\u6307\u5b9a\u5bc6\u94a5\u548c\u8bc1\u4e66\u6587\u4ef6&#xff0c;\u8fd8\u9700\u8981\u6307\u5b9aCA\u8bc1\u4e66\u6587\u4ef6\u7684\u8def\u5f84&#xff1a;<\/p>\n<p>## Path to the file containing the user&#039;s private PEM-encoded key.<br \/>\n## Value: File<br \/>\nlistener.ssl.external.keyfile &#061; etc\/certs\/emqx.key<\/p>\n<p>## Path to a file containing the user certificate.<br \/>\n## Value: File<br \/>\nlistener.ssl.external.certfile &#061; etc\/certs\/emqx.pem<\/p>\n<p>## Path to the file containing PEM-encoded CA certificates. The CA certificates<br \/>\n## Value: File<br \/>\nlistener.ssl.external.cacertfile &#061; etc\/certs\/my_root_ca.pem<\/p>\n<p>\u8fd9\u91cc\u6ce8\u610f&#xff0c;certfile\u6307\u5411\u7684\u662femqx.pem&#xff08;\u6211\u4eec\u7b7e\u53d1\u7684\u670d\u52a1\u5668\u8bc1\u4e66&#xff09;&#xff0c;\u800ccacertfile\u6307\u5411\u7684\u662fmy_root_ca.pem&#xff08;\u6211\u4eec\u81ea\u5df1\u7684\u6839CA\u8bc1\u4e66&#xff09;\u3002\u8fd9\u4e2acacertfile\u5728\u5355\u5411\u8ba4\u8bc1\u7684\u670d\u52a1\u5668\u7aef\u914d\u7f6e\u4e2d&#xff0c;\u4e25\u683c\u6765\u8bf4\u4e0d\u662f\u5fc5\u987b\u7684&#xff0c;\u56e0\u4e3a\u670d\u52a1\u5668\u4e0d\u9700\u8981\u4e3b\u52a8\u53bb\u9a8c\u8bc1\u5ba2\u6237\u7aef\u7684\u8bc1\u4e66&#xff08;\u5355\u5411\u8ba4\u8bc1\u5ba2\u6237\u7aef\u4e0d\u63d0\u4f9b\u8bc1\u4e66&#xff09;\u3002\u4f46\u628a\u5b83\u914d\u4e0a\u6709\u4e24\u4e2a\u597d\u5904&#xff1a;\u4e00\u662f\u914d\u7f6e\u4e60\u60ef\u7edf\u4e00&#xff0c;\u4e8c\u662f\u4e3a\u5c06\u6765\u5f00\u542f\u53cc\u5411\u8ba4\u8bc1&#xff08;verify_peer&#xff09;\u65f6\u7701\u53bb\u4e00\u6b65\u3002<\/p>\n<h4>3.3 \u91cd\u542f\u670d\u52a1\u4e0e\u9a8c\u8bc1\u914d\u7f6e<\/h4>\n<p>\u4fee\u6539\u5b8c\u914d\u7f6e\u6587\u4ef6\u540e&#xff0c;\u6700\u5173\u952e\u7684\u4e00\u6b65\u662f\u91cd\u542fEMQ X\u670d\u52a1&#xff0c;\u8ba9\u914d\u7f6e\u751f\u6548\u3002\u91cd\u542f\u547d\u4ee4\u6839\u636e\u4f60\u7684\u5b89\u88c5\u65b9\u5f0f\u6709\u6240\u4e0d\u540c\u3002\u5982\u679c\u662f\u7528\u7cfb\u7edf\u670d\u52a1\u5b89\u88c5\u7684&#xff0c;\u6bd4\u5982\u5728Ubuntu\u4e0a&#xff1a;<\/p>\n<p>sudo systemctl restart emqx<\/p>\n<p>\u5982\u679c\u662f\u901a\u8fc7\u538b\u7f29\u5305\u89e3\u538b\u76f4\u63a5\u8fd0\u884c\u7684&#xff0c;\u8fdb\u5165\u5230EMQ X\u7684bin\u76ee\u5f55\u4e0b\u6267\u884c&#xff1a;<\/p>\n<p>.\/emqx restart<\/p>\n<p>\u670d\u52a1\u91cd\u542f\u540e&#xff0c;\u600e\u4e48\u77e5\u9053TLS\u76d1\u542c\u5668\u662f\u5426\u6210\u529f\u542f\u52a8\u4e86\u5462&#xff1f;\u4e00\u4e2a\u5feb\u901f\u7684\u65b9\u6cd5\u662f\u4f7f\u7528netstat\u547d\u4ee4\u67e5\u770b8883\u7aef\u53e3\u662f\u5426\u5728\u76d1\u542c\u72b6\u6001&#xff1a;<\/p>\n<p>sudo netstat -tlnp | grep 8883<\/p>\n<p>\u5982\u679c\u770b\u5230EMQ X\u7684\u8fdb\u7a0b\u6b63\u5728\u76d1\u542c0.0.0.0:8883\u6216:::8883&#xff0c;\u90a3\u5c31\u8bf4\u660eTLS\u76d1\u542c\u7aef\u53e3\u5df2\u7ecf\u6210\u529f\u6253\u5f00\u4e86\u3002\u5f53\u7136&#xff0c;\u66f4\u76f4\u89c2\u7684\u65b9\u6cd5\u662f\u4f7f\u7528EMQ X\u81ea\u5e26\u7684Dashboard\u3002\u5728\u6d4f\u89c8\u5668\u4e2d\u6253\u5f00http:\/\/\u4f60\u7684\u670d\u52a1\u5668IP:18083&#xff08;\u9ed8\u8ba4\u7ba1\u7406\u7aef\u53e3&#xff09;&#xff0c;\u767b\u5f55\u540e\u8fdb\u5165\u201c\u76d1\u63a7\u201d -&gt; \u201c\u76d1\u542c\u5668\u201d\u9875\u9762\u3002\u4f60\u5e94\u8be5\u80fd\u770b\u5230\u4e00\u4e2a\u7c7b\u578b\u4e3amqtt:ssl\u7684\u76d1\u542c\u5668&#xff0c;\u72b6\u6001\u662f\u201c\u8fd0\u884c\u4e2d\u201d&#xff0c;\u76d1\u542c\u7684\u5730\u5740\u7aef\u53e3\u6b63\u662f\u4f60\u914d\u7f6e\u7684&#xff08;\u4f8b\u5982:8883&#xff09;\u3002\u770b\u5230\u8fd9\u4e2a&#xff0c;\u5c31\u8bf4\u660e\u670d\u52a1\u5668\u7aef\u7684TLS\u914d\u7f6e\u57fa\u672c\u6ca1\u95ee\u9898\u4e86\u3002<\/p>\n<h3>4. \u8fde\u63a5\u6d4b\u8bd5&#xff1a;\u7528MQTT X\u5ba2\u6237\u7aef\u9a8c\u8bc1\u4f60\u7684\u5b89\u5168\u901a\u9053<\/h3>\n<p>\u914d\u7f6e\u597d\u670d\u52a1\u5668\u7aef&#xff0c;\u53ea\u662f\u5b8c\u6210\u4e86\u5de5\u4f5c\u7684\u4e00\u534a\u3002\u6211\u4eec\u8fd8\u9700\u8981\u4e00\u4e2a\u5ba2\u6237\u7aef\u6765\u5b9e\u9645\u8fde\u63a5&#xff0c;\u9a8c\u8bc1\u6574\u4e2aTLS\u901a\u9053\u662f\u5426\u771f\u7684\u7545\u901a\u4e14\u5b89\u5168\u3002\u8fd9\u91cc\u6211\u5f3a\u70c8\u63a8\u8350\u4f7f\u7528EMQ\u5b98\u65b9\u51fa\u54c1\u7684MQTT X\u5ba2\u6237\u7aef\u5de5\u5177\u3002\u5b83\u8de8\u5e73\u53f0&#xff08;Windows\u3001macOS\u3001Linux\u90fd\u652f\u6301&#xff09;&#xff0c;\u754c\u9762\u53cb\u597d&#xff0c;\u800c\u4e14\u5bf9MQTT 5.0\u548cTLS\u8fde\u63a5\u7684\u652f\u6301\u975e\u5e38\u597d&#xff0c;\u975e\u5e38\u9002\u5408\u505a\u6d4b\u8bd5\u548c\u8c03\u8bd5\u3002<\/p>\n<h4>4.1 \u6d4b\u8bd5\u51c6\u5907\u4e0e\u5ba2\u6237\u7aef\u914d\u7f6e<\/h4>\n<p>\u9996\u5148&#xff0c;\u53bbMQTT X\u5b98\u7f51\u4e0b\u8f7d\u5e76\u5b89\u88c5\u6700\u65b0\u7248\u672c\u3002\u6253\u5f00MQTT X&#xff0c;\u70b9\u51fb\u754c\u9762\u5de6\u4e0a\u89d2\u7684\u201c\u65b0\u5efa\u8fde\u63a5\u201d\u6309\u94ae&#xff0c;\u4f1a\u5f39\u51fa\u8fde\u63a5\u914d\u7f6e\u5bf9\u8bdd\u6846\u3002\u8fd9\u91cc\u6709\u51e0\u4e2a\u5173\u952e\u53c2\u6570\u9700\u8981\u586b\u5199&#xff1a;<\/p>\n<ul>\n<li>\u540d\u79f0&#xff1a;\u7ed9\u4f60\u8fd9\u4e2a\u6d4b\u8bd5\u8fde\u63a5\u8d77\u4e2a\u540d\u5b57&#xff0c;\u6bd4\u5982\u201c\u6d4b\u8bd5EMQX TLS\u201d\u3002<\/li>\n<li>Host&#xff1a;\u8fd9\u91cc\u8981\u586b\u5165\u4f60EMQ X\u670d\u52a1\u5668\u7684\u5b9e\u9645IP\u5730\u5740\u6216\u57df\u540d\u3002\u5982\u679c\u4f60\u5728\u672c\u5730\u6d4b\u8bd5&#xff0c;\u670d\u52a1\u5668\u4e5f\u5728\u672c\u673a&#xff0c;\u53ef\u4ee5\u586b127.0.0.1\u6216localhost\u3002\u91cd\u8981\u63d0\u793a&#xff1a;\u5982\u679c\u4f60\u5728\u914d\u7f6e\u81ea\u7b7e\u540d\u8bc1\u4e66\u65f6&#xff0c;openssl.cnf\u6587\u4ef6\u91cc\u7684alt_names\u5199\u7684\u662fIP\u5730\u5740&#xff08;\u5982IP.1 &#061; 192.168.1.100&#xff09;&#xff0c;\u90a3\u4e48\u8fd9\u91ccHost\u5c31\u5fc5\u987b\u586b\u8fd9\u4e2aIP\u5730\u5740&#xff0c;\u586b\u57df\u540d\u4f1a\u8fde\u63a5\u5931\u8d25&#xff0c;\u56e0\u4e3a\u8bc1\u4e66\u91cc\u7684\u4e3b\u9898\u5907\u7528\u540d\u4e0d\u5339\u914d\u3002\u53cd\u4e4b\u4ea6\u7136\u3002<\/li>\n<li>\u7aef\u53e3&#xff1a;\u586b\u5199\u6211\u4eec\u5728emqx.conf\u91cc\u914d\u7f6e\u7684\u7aef\u53e3&#xff0c;\u9ed8\u8ba4\u662f8883\u3002<\/li>\n<li>\u534f\u8bae&#xff1a;\u9009\u62e9mqtt:\/\/\u8fd8\u662fmqtts:\/\/&#xff1f;\u8fd9\u91cc\u6709\u4e2a\u5c0f\u5751\u3002mqtt:\/\/\u662f\u666e\u901a\u975e\u52a0\u5bc6\u8fde\u63a5&#xff0c;\u7aef\u53e3\u901a\u5e38\u662f1883&#xff1b;mqtts:\/\/\u662f\u52a0\u5bc6\u8fde\u63a5&#xff0c;\u5bf9\u5e94\u7aef\u53e38883\u3002\u4f46\u6839\u636e\u6211\u7684\u5b9e\u6d4b\u7ecf\u9a8c&#xff0c;MQTT X\u5728\u914d\u7f6e\u4e86TLS\u8bc1\u4e66\u540e&#xff0c;\u5373\u4f7f\u8fd9\u91cc\u9009mqtt:\/\/&#xff0c;\u53ea\u8981\u7aef\u53e3\u662f8883&#xff0c;\u5b83\u4e5f\u4f1a\u5c1d\u8bd5TLS\u8fde\u63a5\u3002\u4e0d\u8fc7\u4e3a\u4e86\u6e05\u6670\u65e0\u8bef&#xff0c;\u6211\u5efa\u8bae\u5728\u6d4b\u8bd5TLS\u65f6&#xff0c;\u76f4\u63a5\u9009\u62e9mqtts:\/\/\u534f\u8bae\u3002<\/li>\n<\/ul>\n<p>\u63a5\u4e0b\u6765\u662f\u6700\u6838\u5fc3\u7684\u4e00\u6b65&#xff1a;\u914d\u7f6eTLS\/SSL\u8bc1\u4e66\u53c2\u6570\u3002\u5728\u8fde\u63a5\u914d\u7f6e\u5bf9\u8bdd\u6846\u91cc&#xff0c;\u627e\u5230\u201cSSL\/TLS\u201d\u8fd9\u4e2a\u5f00\u5173&#xff0c;\u628a\u5b83\u6253\u5f00\u3002\u7136\u540e\u4f60\u4f1a\u770b\u5230\u201c\u8bc1\u4e66\u201d\u9009\u9879&#xff0c;\u8fd9\u91cc\u5c31\u662f\u9009\u62e9\u9a8c\u8bc1\u6a21\u5f0f\u7684\u5730\u65b9\u3002<\/p>\n<h4>4.2 \u4f7f\u7528\u8d2d\u4e70\u7684\u6743\u5a01\u8bc1\u4e66\u8fdb\u884c\u8fde\u63a5\u6d4b\u8bd5<\/h4>\n<p>\u5982\u679c\u4f60\u4e3aEMQ X\u914d\u7f6e\u7684\u662f\u4ece\u6743\u5a01CA&#xff08;\u5982Let\u2018s Encrypt&#xff09;\u8d2d\u4e70\u7684\u8bc1\u4e66&#xff0c;\u90a3\u4e48\u6d4b\u8bd5\u975e\u5e38\u7b80\u5355\u3002\u5728MQTT X\u7684\u201c\u8bc1\u4e66\u201d\u4e0b\u62c9\u83dc\u5355\u4e2d&#xff0c;\u9009\u62e9 \u201cCA signed server\u201d &#xff08;CA\u7b7e\u540d\u7684\u670d\u52a1\u5668&#xff09;\u3002\u8fd9\u4e2a\u9009\u9879\u7684\u610f\u601d\u662f&#xff0c;\u5ba2\u6237\u7aef&#xff08;MQTT X&#xff09;\u4f1a\u4f7f\u7528\u64cd\u4f5c\u7cfb\u7edf\u5185\u7f6e\u7684\u53d7\u4fe1\u4efbCA\u6839\u8bc1\u4e66\u5217\u8868&#xff0c;\u53bb\u9a8c\u8bc1\u670d\u52a1\u5668\u7aef\u4f20\u6765\u7684\u8bc1\u4e66\u3002\u7531\u4e8e\u4f60\u7684\u8bc1\u4e66\u662f\u6743\u5a01CA\u7b7e\u53d1\u7684&#xff0c;\u6240\u4ee5\u9a8c\u8bc1\u4f1a\u81ea\u52a8\u901a\u8fc7\u3002<\/p>\n<p>\u9009\u62e9\u8fd9\u4e2a\u6a21\u5f0f\u540e&#xff0c;\u4f60\u4e0d\u9700\u8981\u5728\u5ba2\u6237\u7aef\u4e0a\u4f20\u4efb\u4f55\u8bc1\u4e66\u6587\u4ef6&#xff08;\u5305\u62ecCA\u8bc1\u4e66\u3001\u5ba2\u6237\u7aef\u8bc1\u4e66\u6216\u79c1\u94a5&#xff09;\u3002\u8fd9\u6a21\u62df\u4e86\u771f\u5b9e\u4e16\u754c\u4e2d&#xff0c;\u666e\u901a\u7528\u6237\u8bbe\u5907&#xff08;\u5982\u624b\u673aApp&#xff09;\u8fde\u63a5\u4e00\u4e2aHTTPS\u7f51\u7ad9\u6216MQTTS\u670d\u52a1\u7aef\u7684\u573a\u666f\u3002\u914d\u7f6e\u5b8c\u6210\u540e&#xff0c;\u70b9\u51fb\u201c\u8fde\u63a5\u201d\u6309\u94ae\u3002\u5982\u679c\u4e00\u5207\u6b63\u5e38&#xff0c;\u5de6\u4e0b\u89d2\u7684\u8fde\u63a5\u72b6\u6001\u4f1a\u53d8\u6210\u7eff\u8272\u201c\u5df2\u8fde\u63a5\u201d\u3002\u7136\u540e\u4f60\u53ef\u4ee5\u5728\u4e0b\u65b9\u8ba2\u9605\u4e00\u4e2a\u4e3b\u9898&#xff08;\u6bd4\u5982test\/topic&#xff09;&#xff0c;\u518d\u53d1\u5e03\u4e00\u6761\u6d88\u606f\u5230\u540c\u4e00\u4e2a\u4e3b\u9898&#xff0c;\u5982\u679c\u80fd\u6210\u529f\u6536\u5230\u81ea\u5df1\u53d1\u5e03\u7684\u6d88\u606f&#xff0c;\u5c31\u8bc1\u660e\u5355\u5411TLS\u8fde\u63a5\u5b8c\u5168\u6210\u529f\u4e86\u3002\u6574\u4e2a\u8fc7\u7a0b&#xff0c;\u6570\u636e\u90fd\u5df2\u5728\u52a0\u5bc6\u901a\u9053\u4e2d\u4f20\u8f93\u3002<\/p>\n<h4>4.3 \u4f7f\u7528\u81ea\u7b7e\u540d\u8bc1\u4e66\u8fdb\u884c\u8fde\u63a5\u6d4b\u8bd5<\/h4>\n<p>\u5982\u679c\u4f60\u7528\u7684\u662f\u81ea\u7b7e\u540d\u8bc1\u4e66&#xff0c;\u6b65\u9aa4\u4f1a\u591a\u4e00\u6b65&#xff0c;\u56e0\u4e3a\u4f60\u7684\u81ea\u5efaCA&#xff08;my_root_ca.pem&#xff09;\u4e0d\u5728\u64cd\u4f5c\u7cfb\u7edf\u7684\u4fe1\u4efb\u5217\u8868\u91cc\u3002\u5728MQTT X\u7684\u201c\u8bc1\u4e66\u201d\u4e0b\u62c9\u83dc\u5355\u4e2d&#xff0c;\u8fd9\u6b21\u9700\u8981\u9009\u62e9 \u201cSelf signed\u201d &#xff08;\u81ea\u7b7e\u540d&#xff09;\u3002\u9009\u62e9\u8fd9\u4e2a\u6a21\u5f0f\u540e&#xff0c;\u4e0b\u65b9\u4f1a\u51fa\u73b0\u201cCA\u6587\u4ef6\u201d\u7684\u4e0a\u4f20\u9009\u9879\u3002<\/p>\n<p>\u4f60\u9700\u8981\u70b9\u51fb\u201cCA\u6587\u4ef6\u201d\u65c1\u8fb9\u7684\u4e0a\u4f20\u6309\u94ae&#xff0c;\u9009\u62e9\u4f60\u4e4b\u524d\u751f\u6210\u7684my_root_ca.pem\u6587\u4ef6\u3002\u8fd9\u4e2a\u64cd\u4f5c\u76f8\u5f53\u4e8e\u624b\u52a8\u544a\u8bc9MQTT X\u5ba2\u6237\u7aef&#xff1a;\u201c\u6211\u4fe1\u4efb\u8fd9\u5bb6\u6211\u81ea\u5df1\u6210\u7acb\u7684\u2018\u8bc1\u4e66\u516c\u5b89\u5c40\u2019&#xff0c;\u8bf7\u7528\u5b83\u6765\u9a8c\u8bc1\u5bf9\u9762\u670d\u52a1\u5668\u7684\u8eab\u4efd\u3002\u201d \u540c\u6837&#xff0c;\u5728\u5355\u5411\u8ba4\u8bc1\u6d4b\u8bd5\u4e2d&#xff0c;\u4f60\u4e0d\u9700\u8981\u4e0a\u4f20\u5ba2\u6237\u7aef\u8bc1\u4e66\u548c\u79c1\u94a5\u3002<\/p>\n<p>\u4e0a\u4f20CA\u6587\u4ef6\u540e&#xff0c;\u518d\u6b21\u70b9\u51fb\u201c\u8fde\u63a5\u201d\u3002\u6b64\u65f6&#xff0c;MQTT X\u4f1a\u7528\u4f60\u63d0\u4f9b\u7684my_root_ca.pem\u53bb\u6821\u9a8cEMQ X\u670d\u52a1\u5668\u53d1\u6765\u7684emqx.pem\u8bc1\u4e66\u3002\u5982\u679c\u6821\u9a8c\u901a\u8fc7&#xff08;\u5373\u670d\u52a1\u5668\u8bc1\u4e66\u786e\u5b9e\u662f\u7531\u4f60\u4e0a\u4f20\u7684\u8fd9\u4e2aCA\u7b7e\u53d1\u7684&#xff09;&#xff0c;\u5e76\u4e14\u8bc1\u4e66\u4e2d\u7684\u4e3b\u9898\u5907\u7528\u540d&#xff08;SAN&#xff09;\u4e0e\u4f60\u5728Host\u680f\u586b\u5199\u7684\u5730\u5740\u5339\u914d&#xff0c;\u8fde\u63a5\u5c31\u4f1a\u6210\u529f\u3002\u4e4b\u540e\u540c\u6837\u53ef\u4ee5\u8fdb\u884c\u53d1\u5e03\/\u8ba2\u9605\u6d4b\u8bd5\u3002\u5982\u679c\u8fde\u63a5\u5931\u8d25&#xff0c;\u6700\u5e38\u89c1\u7684\u9519\u8bef\u5c31\u662f\u201c\u8bc1\u4e66\u9a8c\u8bc1\u5931\u8d25\u201d\u6216\u201c\u4e3b\u673a\u540d\u4e0d\u5339\u914d\u201d&#xff0c;\u4f60\u9700\u8981\u56de\u5934\u68c0\u67e5&#xff1a;1) openssl.cnf\u91cc\u7684BROKER_ADDRESS\u662f\u5426\u5199\u5bf9\u4e86&#xff1b;2) MQTT X\u91cc\u586b\u7684Host\u662f\u5426\u548c\u8bc1\u4e66\u91cc\u7684\u4e00\u81f4&#xff1b;3) CA\u6587\u4ef6\u662f\u5426\u4e0a\u4f20\u6b63\u786e\u3002<\/p>\n<h4>4.4 \u6392\u67e5\u5e38\u89c1\u8fde\u63a5\u95ee\u9898<\/h4>\n<p>\u5728\u5b9e\u9645\u64cd\u4f5c\u4e2d&#xff0c;\u4f60\u53ef\u80fd\u4f1a\u9047\u5230\u4e00\u4e9b\u8fde\u63a5\u4e0d\u4e0a\u7684\u60c5\u51b5\u3002\u6211\u628a\u81ea\u5df1\u8e29\u8fc7\u7684\u5751\u603b\u7ed3\u4e00\u4e0b&#xff0c;\u5e2e\u4f60\u5feb\u901f\u5b9a\u4f4d\u95ee\u9898&#xff1a;<\/p>\n<ul>\n<li>\u201cConnection refused\u201d \u6216 \u8fde\u63a5\u8d85\u65f6&#xff1a;\u8fd9\u901a\u5e38\u8bf4\u660e\u5ba2\u6237\u7aef\u6839\u672c\u6ca1\u8fde\u4e0a\u670d\u52a1\u5668\u7684\u7aef\u53e3\u3002\u8bf7\u786e\u8ba4&#xff1a;1) EMQ X\u670d\u52a1\u662f\u5426\u771f\u7684\u91cd\u542f\u6210\u529f\u4e86&#xff1f;2) \u670d\u52a1\u5668\u7684\u9632\u706b\u5899\u662f\u5426\u653e\u884c\u4e868883\u7aef\u53e3&#xff1f;(\u4f8b\u5982&#xff0c;\u5728Linux\u4e0a\u53ef\u4ee5\u7528sudo ufw allow 8883\u653e\u884c)\u30023) \u5982\u679c\u4f60\u5728\u8fdc\u7a0b\u8fde\u63a5&#xff0c;\u7f51\u7edc\u662f\u5426\u901a\u7545&#xff1f;<\/li>\n<li>\u8bc1\u4e66\u9a8c\u8bc1\u9519\u8bef&#xff1a;\u8fd9\u662f\u81ea\u7b7e\u540d\u8bc1\u4e66\u6d4b\u8bd5\u4e2d\u6700\u5e38\u89c1\u7684\u95ee\u9898\u3002\u9519\u8bef\u4fe1\u606f\u53ef\u80fd\u4e94\u82b1\u516b\u95e8&#xff0c;\u6bd4\u5982\u201cself signed certificate in certificate chain\u201d\u3001\u201cunable to get local issuer certificate\u201d\u3002\u8bf7\u4e25\u683c\u6309\u7167\u4e0a\u8ff0\u6b65\u9aa4&#xff0c;\u786e\u4fdd\u5728MQTT X\u4e2d\u9009\u62e9\u4e86\u201cSelf signed\u201d\u5e76\u6b63\u786e\u4e0a\u4f20\u4e86\u751f\u6210\u670d\u52a1\u5668\u8bc1\u4e66\u65f6\u4f7f\u7528\u7684\u90a3\u4e2a\u6839CA\u8bc1\u4e66&#xff08;my_root_ca.pem&#xff09;&#xff0c;\u800c\u4e0d\u662f\u670d\u52a1\u5668\u8bc1\u4e66\u672c\u8eab&#xff08;emqx.pem&#xff09;\u3002<\/li>\n<li>\u4e3b\u673a\u540d\u4e0d\u5339\u914d&#xff1a;\u9519\u8bef\u4fe1\u606f\u53ef\u80fd\u5305\u542b\u201cHostname\/IP does not match certificate\u2019s altnames\u201d\u3002\u8fd9\u94c1\u5b9a\u662f\u8bc1\u4e66\u7684subjectAltName&#xff08;SAN&#xff09;\u548c\u5b9e\u9645\u8fde\u63a5\u7684\u5730\u5740\u5bf9\u4e0d\u4e0a\u3002\u4f60\u5fc5\u987b\u7528\u751f\u6210\u8bc1\u4e66\u65f6\u5199\u5728openssl.cnf\u91cc\u7684\u90a3\u4e2aIP\u6216\u57df\u540d\u53bb\u8fde\u63a5\u3002\u6bd4\u5982\u8bc1\u4e66\u91cc\u5199\u7684\u662fIP 192.168.1.100&#xff0c;\u4f60\u5c31\u4e0d\u80fd\u7528localhost\u53bb\u8fde\u3002<\/li>\n<li>\u7aef\u53e3\u9519\u8bef&#xff1a;\u786e\u4fdd\u5ba2\u6237\u7aef\u8fde\u63a5\u7684\u662fTLS\u7aef\u53e38883&#xff0c;\u800c\u4e0d\u662f\u666e\u901a\u7684MQTT\u7aef\u53e31883\u3002\u8fde1883\u7aef\u53e3\u662f\u4e0d\u4f1a\u8fdb\u884cTLS\u63e1\u624b\u7684\u3002<\/li>\n<\/ul>\n<h3>5. \u6df1\u5165\u7406\u89e3&#xff1a;\u5355\u5411\u8ba4\u8bc1\u4e0e\u53cc\u5411\u8ba4\u8bc1&#xff0c;\u4ee5\u53ca\u66f4\u591a\u5b89\u5168\u52a0\u56fa\u9009\u9879<\/h3>\n<p>\u901a\u8fc7\u4e0a\u9762\u7684\u6b65\u9aa4&#xff0c;\u6211\u4eec\u5df2\u7ecf\u6210\u529f\u5b9e\u73b0\u4e86SSL\/TLS\u5355\u5411\u8ba4\u8bc1\u3002\u6240\u8c13\u5355\u5411\u8ba4\u8bc1&#xff0c;\u5c31\u662f\u53ea\u6709\u5ba2\u6237\u7aef\u9a8c\u8bc1\u670d\u52a1\u5668\u7684\u8eab\u4efd&#xff0c;\u786e\u4fdd\u81ea\u5df1\u8fde\u63a5\u7684\u662f\u771f\u6b63\u7684\u3001\u53ef\u4fe1\u7684\u670d\u52a1\u5668&#xff0c;\u800c\u670d\u52a1\u5668\u4e0d\u9a8c\u8bc1\u5ba2\u6237\u7aef\u7684\u8eab\u4efd\u3002\u8fd9\u5c31\u50cf\u4f60\u8bbf\u95ee\u4e00\u4e2aHTTPS\u7f51\u7ad9&#xff0c;\u6d4f\u89c8\u5668\u4f1a\u68c0\u67e5\u7f51\u7ad9\u7684\u8bc1\u4e66&#xff0c;\u4f46\u7f51\u7ad9\u901a\u5e38\u4e0d\u4f1a\u8981\u6c42\u4f60\u51fa\u793a\u4e2a\u4eba\u8bc1\u4e66\u3002\u8fd9\u79cd\u6a21\u5f0f\u5df2\u7ecf\u80fd\u9632\u6b62\u201c\u4e2d\u95f4\u4eba\u653b\u51fb\u201d\u548c\u7a83\u542c&#xff0c;\u662f\u7edd\u5927\u591a\u6570MQTT\u5e94\u7528\u573a\u666f\u7684\u6807\u914d\u3002<\/p>\n<p>\u4f46\u662f&#xff0c;\u5728\u4e00\u4e9b\u5bf9\u5b89\u5168\u6027\u8981\u6c42\u6781\u9ad8\u7684\u573a\u666f&#xff0c;\u6bd4\u5982\u91d1\u878d\u7269\u8054\u7f51\u3001\u5de5\u4e1a\u63a7\u5236&#xff0c;\u6216\u8005\u8bbe\u5907\u7aef\u4e5f\u9700\u8981\u5f3a\u8eab\u4efd\u6807\u8bc6\u65f6&#xff0c;\u6211\u4eec\u4f1a\u542f\u7528SSL\/TLS\u53cc\u5411\u8ba4\u8bc1&#xff08;\u4e5f\u79f0\u4e3amTLS&#xff09;\u3002\u5728\u53cc\u5411\u8ba4\u8bc1\u4e2d&#xff0c;\u4e0d\u4ec5\u5ba2\u6237\u7aef\u8981\u9a8c\u8bc1\u670d\u52a1\u5668\u8bc1\u4e66&#xff0c;\u670d\u52a1\u5668\u4e5f\u8981\u9a8c\u8bc1\u5ba2\u6237\u7aef\u8bc1\u4e66\u3002\u53ea\u6709\u53cc\u65b9\u90fd\u901a\u8fc7\u4e86\u5bf9\u65b9\u7684\u8eab\u4efd\u9a8c\u8bc1&#xff0c;\u8fde\u63a5\u624d\u80fd\u5efa\u7acb\u3002\u8fd9\u5c31\u597d\u6bd4\u8fdb\u5165\u4e00\u4e2a\u9ad8\u5b89\u5168\u7ea7\u522b\u7684\u5927\u697c&#xff0c;\u4fdd\u5b89\u4e0d\u4ec5\u8981\u68c0\u67e5\u5927\u697c\u7684\u8bc1\u4ef6&#xff08;\u670d\u52a1\u5668\u8bc1\u4e66&#xff09;&#xff0c;\u4f60\u4e5f\u8981\u51fa\u793a\u81ea\u5df1\u7684\u95e8\u7981\u5361&#xff08;\u5ba2\u6237\u7aef\u8bc1\u4e66&#xff09;\u624d\u80fd\u8fdb\u5165\u3002<\/p>\n<p>\u5728EMQ X\u4e2d\u914d\u7f6e\u53cc\u5411\u8ba4\u8bc1&#xff0c;\u9700\u8981\u5728emqx.conf\u7684SSL\u76d1\u542c\u5668\u914d\u7f6e\u4e2d&#xff0c;\u5f00\u542f\u5ba2\u6237\u7aef\u9a8c\u8bc1\u5e76\u6307\u5b9a\u9a8c\u8bc1\u6a21\u5f0f&#xff1a;<\/p>\n<p>## Set the verify mode of the peer.<br \/>\n## Value: verify_peer | verify_none<br \/>\nlistener.ssl.external.verify &#061; verify_peer<\/p>\n<p>\u5c06verify\u8bbe\u7f6e\u4e3averify_peer&#xff0c;\u5c31\u5f00\u542f\u4e86\u670d\u52a1\u5668\u5bf9\u5ba2\u6237\u7aef\u7684\u9a8c\u8bc1\u3002\u6b64\u65f6&#xff0c;\u5ba2\u6237\u7aef\u5728\u8fde\u63a5\u65f6&#xff0c;\u9664\u4e86\u9700\u8981\u50cf\u4e4b\u524d\u90a3\u6837\u4fe1\u4efb\u670d\u52a1\u5668\u7684CA&#xff0c;\u8fd8\u5fc5\u987b\u63d0\u4f9b\u7531\u670d\u52a1\u5668\u6240\u4fe1\u4efb\u7684CA&#xff08;\u53ef\u4ee5\u662f\u53e6\u4e00\u4e2a\u4e13\u95e8\u7684CA&#xff09;\u7b7e\u53d1\u7684\u5ba2\u6237\u7aef\u8bc1\u4e66\u548c\u5bf9\u5e94\u7684\u79c1\u94a5\u3002\u670d\u52a1\u5668\u7aef\u4e5f\u9700\u8981\u914d\u7f6e\u4e00\u4e2a\u7528\u4e8e\u9a8c\u8bc1\u5ba2\u6237\u7aef\u8bc1\u4e66\u7684CA\u8bc1\u4e66\u6587\u4ef6&#xff08;cacertfile&#xff09;&#xff0c;\u8fd9\u4e2aCA\u8bc1\u4e66\u9700\u8981\u80fd\u7b7e\u53d1\u6240\u6709\u5408\u6cd5\u5ba2\u6237\u7aef\u7684\u8bc1\u4e66\u3002\u914d\u7f6e\u4e86\u53cc\u5411\u8ba4\u8bc1\u540e&#xff0c;\u4efb\u4f55\u6ca1\u6709\u5408\u6cd5\u5ba2\u6237\u7aef\u8bc1\u4e66\u7684\u8bbe\u5907\u90fd\u65e0\u6cd5\u8fde\u63a5\u5230EMQ X\u670d\u52a1\u5668&#xff0c;\u5b89\u5168\u6027\u8fdb\u4e00\u6b65\u63d0\u5347\u3002<\/p>\n<p>\u9664\u4e86\u8ba4\u8bc1\u65b9\u5f0f&#xff0c;TLS\u672c\u8eab\u8fd8\u6709\u5f88\u591a\u53ef\u4ee5\u8c03\u4f18\u7684\u5b89\u5168\u53c2\u6570\u3002\u5728emqx.conf\u4e2d&#xff0c;\u4f60\u53ef\u4ee5\u627e\u5230\u8bf8\u5982ciphers&#xff08;\u5bc6\u7801\u5957\u4ef6&#xff09;\u3001tls_versions&#xff08;TLS\u7248\u672c&#xff09;\u7b49\u914d\u7f6e\u9879\u3002\u6211\u5efa\u8bae\u751f\u4ea7\u73af\u5883\u4e2d&#xff0c;\u81f3\u5c11\u8981\u5c06tls_versions\u8bbe\u7f6e\u4e3atlsv1.2,tlsv1.3&#xff0c;\u7981\u7528\u8001\u65e7\u4e0d\u5b89\u5168\u7684TLS 1.0\u548c1.1\u7248\u672c\u3002\u5bf9\u4e8eciphers&#xff0c;\u53ef\u4ee5\u9009\u62e9\u4e00\u4e9b\u516c\u8ba4\u5f3a\u5b89\u5168\u7684\u5957\u4ef6\u7ec4\u5408&#xff0c;\u907f\u514d\u4f7f\u7528\u5df2\u77e5\u6709\u6f0f\u6d1e\u7684\u52a0\u5bc6\u7b97\u6cd5\u3002EMQ X\u9ed8\u8ba4\u7684\u914d\u7f6e\u5df2\u7ecf\u6bd4\u8f83\u5b89\u5168&#xff0c;\u4f46\u4e86\u89e3\u8fd9\u4e9b\u9009\u9879\u6709\u52a9\u4e8e\u4f60\u6839\u636e\u81ea\u8eab\u7684\u5b89\u5168\u7b56\u7565\u8fdb\u884c\u5fae\u8c03\u3002<\/p>\n<p>\u6700\u540e&#xff0c;\u522b\u5fd8\u4e86\u8bc1\u4e66\u662f\u6709\u6709\u6548\u671f\u7684\u3002\u65e0\u8bba\u662f\u8d2d\u4e70\u7684\u8bc1\u4e66\u8fd8\u662f\u81ea\u7b7e\u540d\u7684\u8bc1\u4e66&#xff0c;\u90fd\u8981\u5173\u6ce8\u5176\u8fc7\u671f\u65f6\u95f4\u3002\u5bf9\u4e8e\u751f\u4ea7\u7cfb\u7edf&#xff0c;\u4e00\u5b9a\u8981\u5efa\u7acb\u8bc1\u4e66\u5230\u671f\u524d\u7684\u76d1\u63a7\u548c\u66f4\u6362\u6d41\u7a0b\u3002\u81ea\u7b7e\u540d\u8bc1\u4e66\u867d\u7136\u65b9\u4fbf\u6d4b\u8bd5&#xff0c;\u4f46\u5728\u751f\u4ea7\u73af\u5883\u957f\u671f\u4f7f\u7528\u4f1a\u5e26\u6765\u7ef4\u62a4\u8d1f\u62c5&#xff08;\u9700\u8981\u5728\u6240\u6709\u5ba2\u6237\u7aef\u624b\u52a8\u5b89\u88c5CA\u8bc1\u4e66&#xff09;&#xff0c;\u56e0\u6b64\u957f\u671f\u8fd0\u884c\u3001\u9762\u5411\u516c\u4f17\u7684\u670d\u52a1&#xff0c;\u8fd8\u662f\u63a8\u8350\u4f7f\u7528\u6743\u5a01CA\u7684\u8bc1\u4e66&#xff0c;\u6216\u8005\u642d\u5efa\u4e00\u4e2a\u79c1\u6709\u4f46\u53d7\u63a7\u7684\u5185\u90e8CA\u4f53\u7cfb\u3002\u5b89\u5168\u662f\u4e00\u4e2a\u6301\u7eed\u7684\u8fc7\u7a0b&#xff0c;\u542f\u7528TLS\u662f\u4e00\u4e2a\u91cd\u8981\u7684\u5f00\u59cb&#xff0c;\u4f46\u7edd\u4e0d\u662f\u7ec8\u70b9\u3002\u5b9a\u671f\u66f4\u65b0EMQ X\u7248\u672c\u4ee5\u83b7\u53d6\u5b89\u5168\u8865\u4e01&#xff0c;\u5408\u7406\u89c4\u5212\u7f51\u7edc\u9632\u706b\u5899\u7b56\u7565&#xff0c;\u7ed3\u5408ACL\u8fdb\u884c\u5e94\u7528\u5c42\u6743\u9650\u63a7\u5236&#xff0c;\u624d\u80fd\u6784\u5efa\u8d77\u4e00\u4e2a\u771f\u6b63\u5065\u58ee\u7684\u7269\u8054\u7f51\u901a\u4fe1\u7cfb\u7edf\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. \u4e3a\u4ec0\u4e48\u4f60\u7684MQTT\u8fde\u63a5\u9700\u8981\u201c\u4e0a\u9501\u201d&#xff1f;\u804a\u804aSSL\/TLS\u7684\u91cd\u8981\u6027<br \/>\n\u6211\u521a\u5f00\u59cb\u63a5\u89e6\u7269\u8054\u7f51\u9879\u76ee\u7684\u65f6\u5019&#xff0c;\u603b\u89c9\u5f97\u8bbe\u5907\u80fd\u8fde\u4e0a\u670d\u52a1\u5668\u3001\u80fd\u6536\u53d1\u6570\u636e\u5c31\u4e07\u4e8b\u5927\u5409\u4e86\u3002\u76f4\u5230\u6709\u4e00\u6b21&#xff0c;\u6211\u4eec\u4e00\u4e2a\u667a\u80fd\u5bb6\u5c45\u7684\u6d4b\u8bd5\u9879\u76ee&#xff0c;\u88ab\u9694\u58c1\u5de5\u4f4d\u7684\u540c\u4e8b\u7528\u4e2a\u7b80\u5355\u7684\u6293\u5305\u5de5\u5177&#xff0c;\u5c31\u628a\u6240\u6709\u8bbe\u5907\u7684\u5f00\u5173\u6307\u4ee4\u3001\u6e29\u5ea6\u6570\u636e\u770b\u5f97\u4e00\u6e05\u4e8c\u695a&#xff0c;\u90a3\u4e00\u523b\u771f\u662f\u540e\u80cc\u53d1\u51c9\u3002\u4f60\u60f3\u60f3&#xff0c;\u5982\u679c\u8fd9\u662f\u771f\u5b9e\u7684\u5bb6\u5ead\u73af\u5883&#xff0c;\u4f60\u5bb6\u7684\u7a7a\u8c03\u5f00\u5173\u3001\u95e8\u7a97\u72b6\u6001\u751a\u81f3\u6444\u50cf\u5934\u753b\u9762&amp;#xf<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[8594,8592,8593,320],"topic":[],"class_list":["post-78091","post","type-post","status-publish","format-standard","hentry","category-server","tag-emq-x","tag-ssl-tls","tag-8593","tag-mqtt"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>EMQ X MQTT \u670d\u52a1\u5668 SSL\/TLS \u5b89\u5168\u8fde\u63a5\u5b9e\u6218\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.wsisp.com\/helps\/78091.html\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"EMQ X MQTT \u670d\u52a1\u5668 SSL\/TLS \u5b89\u5168\u8fde\u63a5\u5b9e\u6218\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"og:description\" content=\"1. \u4e3a\u4ec0\u4e48\u4f60\u7684MQTT\u8fde\u63a5\u9700\u8981\u201c\u4e0a\u9501\u201d&#xff1f;\u804a\u804aSSL\/TLS\u7684\u91cd\u8981\u6027 \u6211\u521a\u5f00\u59cb\u63a5\u89e6\u7269\u8054\u7f51\u9879\u76ee\u7684\u65f6\u5019&#xff0c;\u603b\u89c9\u5f97\u8bbe\u5907\u80fd\u8fde\u4e0a\u670d\u52a1\u5668\u3001\u80fd\u6536\u53d1\u6570\u636e\u5c31\u4e07\u4e8b\u5927\u5409\u4e86\u3002\u76f4\u5230\u6709\u4e00\u6b21&#xff0c;\u6211\u4eec\u4e00\u4e2a\u667a\u80fd\u5bb6\u5c45\u7684\u6d4b\u8bd5\u9879\u76ee&#xff0c;\u88ab\u9694\u58c1\u5de5\u4f4d\u7684\u540c\u4e8b\u7528\u4e2a\u7b80\u5355\u7684\u6293\u5305\u5de5\u5177&#xff0c;\u5c31\u628a\u6240\u6709\u8bbe\u5907\u7684\u5f00\u5173\u6307\u4ee4\u3001\u6e29\u5ea6\u6570\u636e\u770b\u5f97\u4e00\u6e05\u4e8c\u695a&#xff0c;\u90a3\u4e00\u523b\u771f\u662f\u540e\u80cc\u53d1\u51c9\u3002\u4f60\u60f3\u60f3&#xff0c;\u5982\u679c\u8fd9\u662f\u771f\u5b9e\u7684\u5bb6\u5ead\u73af\u5883&#xff0c;\u4f60\u5bb6\u7684\u7a7a\u8c03\u5f00\u5173\u3001\u95e8\u7a97\u72b6\u6001\u751a\u81f3\u6444\u50cf\u5934\u753b\u9762&amp;#xf\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.wsisp.com\/helps\/78091.html\" \/>\n<meta property=\"og:site_name\" content=\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\" \/>\n<meta property=\"article:published_time\" content=\"2026-02-25T23:34:47+00:00\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/78091.html\",\"url\":\"https:\/\/www.wsisp.com\/helps\/78091.html\",\"name\":\"EMQ X MQTT \u670d\u52a1\u5668 SSL\/TLS \u5b89\u5168\u8fde\u63a5\u5b9e\u6218\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"isPartOf\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\"},\"datePublished\":\"2026-02-25T23:34:47+00:00\",\"dateModified\":\"2026-02-25T23:34:47+00:00\",\"author\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.wsisp.com\/helps\/78091.html#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.wsisp.com\/helps\/78091.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/78091.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.wsisp.com\/helps\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"EMQ X MQTT \u670d\u52a1\u5668 SSL\/TLS \u5b89\u5168\u8fde\u63a5\u5b9e\u6218\u6307\u5357\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#website\",\"url\":\"https:\/\/www.wsisp.com\/helps\/\",\"name\":\"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3\",\"description\":\"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"contentUrl\":\"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery\",\"caption\":\"admin\"},\"sameAs\":[\"http:\/\/wp.wsisp.com\"],\"url\":\"https:\/\/www.wsisp.com\/helps\/author\/admin\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"EMQ X MQTT \u670d\u52a1\u5668 SSL\/TLS \u5b89\u5168\u8fde\u63a5\u5b9e\u6218\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.wsisp.com\/helps\/78091.html","og_locale":"zh_CN","og_type":"article","og_title":"EMQ X MQTT \u670d\u52a1\u5668 SSL\/TLS \u5b89\u5168\u8fde\u63a5\u5b9e\u6218\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","og_description":"1. \u4e3a\u4ec0\u4e48\u4f60\u7684MQTT\u8fde\u63a5\u9700\u8981\u201c\u4e0a\u9501\u201d&#xff1f;\u804a\u804aSSL\/TLS\u7684\u91cd\u8981\u6027 \u6211\u521a\u5f00\u59cb\u63a5\u89e6\u7269\u8054\u7f51\u9879\u76ee\u7684\u65f6\u5019&#xff0c;\u603b\u89c9\u5f97\u8bbe\u5907\u80fd\u8fde\u4e0a\u670d\u52a1\u5668\u3001\u80fd\u6536\u53d1\u6570\u636e\u5c31\u4e07\u4e8b\u5927\u5409\u4e86\u3002\u76f4\u5230\u6709\u4e00\u6b21&#xff0c;\u6211\u4eec\u4e00\u4e2a\u667a\u80fd\u5bb6\u5c45\u7684\u6d4b\u8bd5\u9879\u76ee&#xff0c;\u88ab\u9694\u58c1\u5de5\u4f4d\u7684\u540c\u4e8b\u7528\u4e2a\u7b80\u5355\u7684\u6293\u5305\u5de5\u5177&#xff0c;\u5c31\u628a\u6240\u6709\u8bbe\u5907\u7684\u5f00\u5173\u6307\u4ee4\u3001\u6e29\u5ea6\u6570\u636e\u770b\u5f97\u4e00\u6e05\u4e8c\u695a&#xff0c;\u90a3\u4e00\u523b\u771f\u662f\u540e\u80cc\u53d1\u51c9\u3002\u4f60\u60f3\u60f3&#xff0c;\u5982\u679c\u8fd9\u662f\u771f\u5b9e\u7684\u5bb6\u5ead\u73af\u5883&#xff0c;\u4f60\u5bb6\u7684\u7a7a\u8c03\u5f00\u5173\u3001\u95e8\u7a97\u72b6\u6001\u751a\u81f3\u6444\u50cf\u5934\u753b\u9762&amp;#xf","og_url":"https:\/\/www.wsisp.com\/helps\/78091.html","og_site_name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","article_published_time":"2026-02-25T23:34:47+00:00","author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"7 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.wsisp.com\/helps\/78091.html","url":"https:\/\/www.wsisp.com\/helps\/78091.html","name":"EMQ X MQTT \u670d\u52a1\u5668 SSL\/TLS \u5b89\u5168\u8fde\u63a5\u5b9e\u6218\u6307\u5357 - \u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","isPartOf":{"@id":"https:\/\/www.wsisp.com\/helps\/#website"},"datePublished":"2026-02-25T23:34:47+00:00","dateModified":"2026-02-25T23:34:47+00:00","author":{"@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41"},"breadcrumb":{"@id":"https:\/\/www.wsisp.com\/helps\/78091.html#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.wsisp.com\/helps\/78091.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.wsisp.com\/helps\/78091.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.wsisp.com\/helps"},{"@type":"ListItem","position":2,"name":"EMQ X MQTT \u670d\u52a1\u5668 SSL\/TLS \u5b89\u5168\u8fde\u63a5\u5b9e\u6218\u6307\u5357"}]},{"@type":"WebSite","@id":"https:\/\/www.wsisp.com\/helps\/#website","url":"https:\/\/www.wsisp.com\/helps\/","name":"\u7f51\u7855\u4e92\u8054\u5e2e\u52a9\u4e2d\u5fc3","description":"\u9999\u6e2f\u670d\u52a1\u5668_\u9999\u6e2f\u4e91\u670d\u52a1\u5668\u8d44\u8baf_\u670d\u52a1\u5668\u5e2e\u52a9\u6587\u6863_\u670d\u52a1\u5668\u6559\u7a0b","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.wsisp.com\/helps\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/358e386c577a3ab51c4493330a20ad41","name":"admin","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.wsisp.com\/helps\/#\/schema\/person\/image\/","url":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","contentUrl":"https:\/\/gravatar.wp-china-yes.net\/avatar\/?s=96&d=mystery","caption":"admin"},"sameAs":["http:\/\/wp.wsisp.com"],"url":"https:\/\/www.wsisp.com\/helps\/author\/admin"}]}},"_links":{"self":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/78091","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/comments?post=78091"}],"version-history":[{"count":0,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/posts\/78091\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/media?parent=78091"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/categories?post=78091"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/tags?post=78091"},{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.wsisp.com\/helps\/wp-json\/wp\/v2\/topic?post=78091"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}