Update emqttd Test Suite
This commit is contained in:
HuangDan
parent
2b54745f69
commit
cb4841631e
|
|
@ -24,6 +24,8 @@
|
||||||
|
|
||||||
-include_lib("common_test/include/ct.hrl").
|
-include_lib("common_test/include/ct.hrl").
|
||||||
|
|
||||||
|
-define(APP, emqttd).
|
||||||
|
|
||||||
-define(CONTENT_TYPE, "application/x-www-form-urlencoded").
|
-define(CONTENT_TYPE, "application/x-www-form-urlencoded").
|
||||||
|
|
||||||
-define(MQTT_SSL_TWOWAY, [{cacertfile, "certs/cacert.pem"},
|
-define(MQTT_SSL_TWOWAY, [{cacertfile, "certs/cacert.pem"},
|
||||||
|
|
@ -52,8 +54,9 @@ all() ->
|
||||||
groups() ->
|
groups() ->
|
||||||
[{protocol, [sequence],
|
[{protocol, [sequence],
|
||||||
[mqtt_connect,
|
[mqtt_connect,
|
||||||
mqtt_ssl_oneway,
|
mqtt_ssl_twoway,
|
||||||
mqtt_ssl_twoway]},
|
mqtt_ssl_oneway
|
||||||
|
]},
|
||||||
{pubsub, [sequence],
|
{pubsub, [sequence],
|
||||||
[subscribe_unsubscribe,
|
[subscribe_unsubscribe,
|
||||||
publish, pubsub,
|
publish, pubsub,
|
||||||
|
|
@ -100,24 +103,17 @@ groups() ->
|
||||||
]},
|
]},
|
||||||
cli_vm]},
|
cli_vm]},
|
||||||
{cleanSession, [sequence],
|
{cleanSession, [sequence],
|
||||||
[cleanSession_validate,
|
[cleanSession_validate
|
||||||
cleanSession_validate1
|
|
||||||
]}].
|
]}].
|
||||||
|
|
||||||
init_per_suite(Config) ->
|
init_per_suite(Config) ->
|
||||||
application:start(lager),
|
NewConfig = generate_config(),
|
||||||
DataDir = proplists:get_value(data_dir, Config),
|
lists:foreach(fun set_app_env/1, NewConfig),
|
||||||
NewConfig = emqttd_config(DataDir),
|
application:ensure_all_started(?APP),
|
||||||
Vals = change_opts(ssl_oneway, DataDir, proplists:get_value(emqttd, NewConfig)),
|
Config.
|
||||||
[application:set_env(emqttd, Par, Value) || {Par, Value} <- Vals],
|
|
||||||
application:ensure_all_started(emqttd),
|
|
||||||
[{config, NewConfig} | Config].
|
|
||||||
|
|
||||||
end_per_suite(_Config) ->
|
end_per_suite(_Config) ->
|
||||||
application:stop(emqttd),
|
emqttd:shutdown().
|
||||||
application:stop(esockd),
|
|
||||||
application:stop(gproc),
|
|
||||||
emqttd_mnesia:ensure_stopped().
|
|
||||||
|
|
||||||
%%--------------------------------------------------------------------
|
%%--------------------------------------------------------------------
|
||||||
%% Protocol Test
|
%% Protocol Test
|
||||||
|
|
@ -138,30 +134,31 @@ connect_broker_(Packet, RecvSize) ->
|
||||||
Data.
|
Data.
|
||||||
|
|
||||||
mqtt_ssl_oneway(_) ->
|
mqtt_ssl_oneway(_) ->
|
||||||
|
emqttd:stop(),
|
||||||
|
change_opts(ssl_oneway),
|
||||||
|
emqttd:start(),
|
||||||
{ok, SslOneWay} = emqttc:start_link([{host, "localhost"},
|
{ok, SslOneWay} = emqttc:start_link([{host, "localhost"},
|
||||||
{port, 8883},
|
{port, 8883},
|
||||||
{client_id, <<"ssloneway">>}, ssl]),
|
{client_id, <<"ssloneway">>}, ssl]),
|
||||||
timer:sleep(10),
|
timer:sleep(100),
|
||||||
emqttc:subscribe(SslOneWay, <<"topic">>, qos1),
|
emqttc:subscribe(SslOneWay, <<"topic">>, qos1),
|
||||||
{ok, Pub} = emqttc:start_link([{host, "localhost"},
|
{ok, Pub} = emqttc:start_link([{host, "localhost"},
|
||||||
{client_id, <<"pub">>}]),
|
{client_id, <<"pub">>}]),
|
||||||
emqttc:publish(Pub, <<"topic">>, <<"SSL oneWay test">>, [{qos, 1}]),
|
emqttc:publish(Pub, <<"topic">>, <<"SSL oneWay test">>, [{qos, 1}]),
|
||||||
timer:sleep(10),
|
timer:sleep(100),
|
||||||
receive {publish, _Topic, RM} ->
|
receive {publish, _Topic, RM} ->
|
||||||
?assertEqual(<<"SSL oneWay test">>, RM)
|
?assertEqual(<<"SSL oneWay test">>, RM)
|
||||||
after 1000 -> false
|
after 1000 -> false
|
||||||
end,
|
end,
|
||||||
|
timer:sleep(100),
|
||||||
emqttc:disconnect(SslOneWay),
|
emqttc:disconnect(SslOneWay),
|
||||||
emqttc:disconnect(Pub).
|
emqttc:disconnect(Pub).
|
||||||
|
|
||||||
mqtt_ssl_twoway(Config) ->
|
mqtt_ssl_twoway(_) ->
|
||||||
emqttd_cluster:prepare(),
|
emqttd:stop(),
|
||||||
DataDir = proplists:get_value(data_dir, Config),
|
change_opts(ssl_twoway),
|
||||||
EmqConfig = proplists:get_value(config, Config),
|
emqttd:start(),
|
||||||
Vals = change_opts(ssl_twoway, DataDir, proplists:get_value(emqttd, EmqConfig)),
|
ClientSSl = [{Key, local_path(["etc", File])} ||
|
||||||
[application:set_env(emqttd, Par, Value) || {Par, Value} <- Vals],
|
|
||||||
emqttd_cluster:reboot(),
|
|
||||||
ClientSSl = [{Key, filename:join([DataDir, File])} ||
|
|
||||||
{Key, File} <- ?MQTT_SSL_CLIENT],
|
{Key, File} <- ?MQTT_SSL_CLIENT],
|
||||||
{ok, SslTwoWay} = emqttc:start_link([{host, "localhost"},
|
{ok, SslTwoWay} = emqttc:start_link([{host, "localhost"},
|
||||||
{port, 8883},
|
{port, 8883},
|
||||||
|
|
@ -418,7 +415,7 @@ hook_fun8(arg, initArg) -> stop.
|
||||||
request_status(_) ->
|
request_status(_) ->
|
||||||
{InternalStatus, _ProvidedStatus} = init:get_status(),
|
{InternalStatus, _ProvidedStatus} = init:get_status(),
|
||||||
AppStatus =
|
AppStatus =
|
||||||
case lists:keysearch(emqttd, 1, application:which_applications()) of
|
case lists:keysearch(?APP, 1, application:which_applications()) of
|
||||||
false -> not_running;
|
false -> not_running;
|
||||||
{value, _Val} -> running
|
{value, _Val} -> running
|
||||||
end,
|
end,
|
||||||
|
|
@ -596,59 +593,56 @@ cleanSession_validate(_) ->
|
||||||
emqttc:disconnect(Pub),
|
emqttc:disconnect(Pub),
|
||||||
emqttc:disconnect(C11).
|
emqttc:disconnect(C11).
|
||||||
|
|
||||||
cleanSession_validate1(_) ->
|
change_opts(SslType) ->
|
||||||
{ok, C1} = emqttc:start_link([{host, "localhost"},
|
{ok, Listeners} = application:get_env(?APP, listeners),
|
||||||
{port, 1883},
|
|
||||||
{client_id, <<"c1">>},
|
|
||||||
{clean_sess, true}]),
|
|
||||||
timer:sleep(10),
|
|
||||||
emqttc:subscribe(C1, <<"topic">>, qos1),
|
|
||||||
emqttc:disconnect(C1),
|
|
||||||
{ok, Pub} = emqttc:start_link([{host, "localhost"},
|
|
||||||
{port, 1883},
|
|
||||||
{client_id, <<"pub">>}]),
|
|
||||||
|
|
||||||
emqttc:publish(Pub, <<"topic">>, <<"m1">>, [{qos, 1}]),
|
|
||||||
timer:sleep(10),
|
|
||||||
{ok, C11} = emqttc:start_link([{host, "localhost"},
|
|
||||||
{port, 1883},
|
|
||||||
{client_id, <<"c1">>},
|
|
||||||
{clean_sess, false}]),
|
|
||||||
timer:sleep(100),
|
|
||||||
Metrics = emqttd_metrics:all(),
|
|
||||||
?assertEqual(0, proplists:get_value('messages/qos1/sent', Metrics)),
|
|
||||||
?assertEqual(1, proplists:get_value('messages/qos1/received', Metrics)),
|
|
||||||
emqttc:disconnect(Pub),
|
|
||||||
emqttc:disconnect(C11).
|
|
||||||
|
|
||||||
emqttd_config(DataDir) ->
|
|
||||||
Schema = cuttlefish_schema:files([filename:join([DataDir, "emqttd.schema"])]),
|
|
||||||
Conf = conf_parse:file(filename:join([DataDir, "emqttd.conf"])),
|
|
||||||
cuttlefish_generator:map(Schema, Conf).
|
|
||||||
|
|
||||||
change_opts(SslType, DataDir, Vals) ->
|
|
||||||
Listeners = proplists:get_value(listeners, Vals),
|
|
||||||
NewListeners =
|
NewListeners =
|
||||||
lists:foldl(fun({Protocol, Port, Opts} = Listener, Acc) ->
|
lists:foldl(fun({Protocol, Port, Opts} = Listener, Acc) ->
|
||||||
case Protocol of
|
case Protocol of
|
||||||
ssl ->
|
ssl ->
|
||||||
SslOpts = proplists:get_value(sslopts, Opts),
|
SslOpts = proplists:get_value(sslopts, Opts),
|
||||||
Keyfile = filename:join([DataDir, proplists:get_value(keyfile, SslOpts)]),
|
Keyfile = local_path(["etc/certs", "key.pem"]),
|
||||||
Certfile = filename:join([DataDir, proplists:get_value(certfile, SslOpts)]),
|
Certfile = local_path(["etc/certs", "cert.pem"]),
|
||||||
TupleList1 = lists:keyreplace(keyfile, 1, SslOpts, {keyfile, Keyfile}),
|
TupleList1 = lists:keyreplace(keyfile, 1, SslOpts, {keyfile, Keyfile}),
|
||||||
TupleList2 = lists:keyreplace(certfile, 1, TupleList1, {certfile, Certfile}),
|
TupleList2 = lists:keyreplace(certfile, 1, TupleList1, {certfile, Certfile}),
|
||||||
TupleList3 =
|
TupleList3 =
|
||||||
case SslType of
|
case SslType of
|
||||||
ssl_twoway->
|
ssl_twoway->
|
||||||
CAfile = filename:join([DataDir, proplists:get_value(cacertfile, ?MQTT_SSL_TWOWAY)]),
|
CAfile = local_path(["etc", proplists:get_value(cacertfile, ?MQTT_SSL_TWOWAY)]),
|
||||||
MutSslList = lists:keyreplace(cacertfile, 1, ?MQTT_SSL_TWOWAY, {cacertfile, CAfile}),
|
MutSslList = lists:keyreplace(cacertfile, 1, ?MQTT_SSL_TWOWAY, {cacertfile, CAfile}),
|
||||||
lists:merge(TupleList2, MutSslList);
|
lists:merge(TupleList2, MutSslList);
|
||||||
_ ->
|
_ ->
|
||||||
TupleList2
|
lists:filter(fun ({cacertfile, _}) -> false;
|
||||||
|
({verify, _}) -> false;
|
||||||
|
({fail_if_no_peer_cert, _}) -> false;
|
||||||
|
(_) -> true
|
||||||
|
end, TupleList2)
|
||||||
end,
|
end,
|
||||||
[{Protocol, Port, [{ssl, TupleList3}]} | Acc];
|
[{Protocol, Port, lists:keyreplace(sslopts, 1, Opts, {sslopts, TupleList3})} | Acc];
|
||||||
_ ->
|
_ ->
|
||||||
[Listener | Acc]
|
[Listener | Acc]
|
||||||
end
|
end
|
||||||
end, [], Listeners),
|
end, [], Listeners),
|
||||||
lists:keyreplace(listeners, 1, Vals, {listeners, NewListeners}).
|
application:set_env(?APP, listeners, NewListeners).
|
||||||
|
|
||||||
|
generate_config() ->
|
||||||
|
Schema = cuttlefish_schema:files([local_path(["priv", "emq.schema"])]),
|
||||||
|
Conf = conf_parse:file([local_path(["etc", "emq.conf"])]),
|
||||||
|
cuttlefish_generator:map(Schema, Conf).
|
||||||
|
|
||||||
|
get_base_dir(Module) ->
|
||||||
|
{file, Here} = code:is_loaded(Module),
|
||||||
|
filename:dirname(filename:dirname(Here)).
|
||||||
|
|
||||||
|
get_base_dir() ->
|
||||||
|
get_base_dir(?MODULE).
|
||||||
|
|
||||||
|
local_path(Components, Module) ->
|
||||||
|
filename:join([get_base_dir(Module) | Components]).
|
||||||
|
|
||||||
|
local_path(Components) ->
|
||||||
|
local_path(Components, ?MODULE).
|
||||||
|
|
||||||
|
set_app_env({App, Lists}) ->
|
||||||
|
lists:foreach(fun({Par, Var}) ->
|
||||||
|
application:set_env(App, Par, Var)
|
||||||
|
end, Lists).
|
||||||
|
|
|
||||||
|
|
@ -1,17 +0,0 @@
|
||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIICxjCCAa6gAwIBAgIJAPhU8tv3KMe/MA0GCSqGSIb3DQEBCwUAMBMxETAPBgNV
|
|
||||||
BAMMCE15VGVzdENBMB4XDTE2MTAzMTA3MTU0NVoXDTE3MTAzMTA3MTU0NVowEzER
|
|
||||||
MA8GA1UEAwwITXlUZXN0Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
|
|
||||||
AQCtPcDnmjiVl7ScDhYvGaW+PUgfp7P5cM39mnrW6fkxhA0tgunWpWlYVKbcuh5y
|
|
||||||
4bTNYrOQpcFO3Zg62tva4XEL8O1huqTlGsAeysZ3vWE4/8NGN/3wZy0TKDvwiwOB
|
|
||||||
tbS3C5wcRQZohExL6yEL4XzDGk44x2mIs8/NzeG7Zycqybh9tsCJiHbLiTxnLa24
|
|
||||||
v5USOtlvWye0hA0yUUqc2k7tKVmIMT4A4ulMb2sDVRrSLjyFDTI0c8grlPLfKbG8
|
|
||||||
gpYLsHn9aAjqviyvmJdRLxwauqn+ghNWn1TyZwgAUxpoTtWeC0ilzEt18RP8vZjm
|
|
||||||
eCbEP4qQDDvSCdLrie5CezyxAgMBAAGjHTAbMAwGA1UdEwQFMAMBAf8wCwYDVR0P
|
|
||||||
BAQDAgEGMA0GCSqGSIb3DQEBCwUAA4IBAQBJ/I/QJjU+mgkIaaHImFcIYFrfBirC
|
|
||||||
vDiWo2W+zRh7CbcSf+jsksI99d230ixSDY36CPLKZeZhELST7xWKEELKbPdNbtOO
|
|
||||||
EM10+XteLSXKVNGXfrEbW973eum3FGLobMA9OcH6+qDaf08pibe7kuv10aAgSs/I
|
|
||||||
0Qg5H/UTAKQJKO9hhOgERM/FettuF+WGJaaZZZb9Y2YYBNRf/GtM8KHCjpCX9+XD
|
|
||||||
kdeQGO8Hn10H9tOmggyfdIpsunBcs2/6/exCp8RPBWurN2GSW2RcnS5xVL0r+SVW
|
|
||||||
VOhSDy1JwnNPczpqkqE74qAbAah0dTJFcFWzeGLVk7Kp+2pissAiU3gg
|
|
||||||
-----END CERTIFICATE-----
|
|
||||||
|
|
@ -1,18 +0,0 @@
|
||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIIC9jCCAd6gAwIBAgIBATANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDDAhNeVRl
|
|
||||||
c3RDQTAeFw0xNjEwMzEwNzE1NDVaFw0xNzEwMzEwNzE1NDVaMDkxJjAkBgNVBAMT
|
|
||||||
HWRlbmdoYWlndWlkZU1hY0Jvb2stQWlyLmxvY2FsMQ8wDQYDVQQKEwZzZXJ2ZXIw
|
|
||||||
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ena4vgWrzwUB0hGW1v0v
|
|
||||||
K986FhU5ZdYz5H5MGonfWwv89nR2DlftSDXEvKFyc2MT81GGm16VJv3mVpQJLuKA
|
|
||||||
xLBLY7a1zSrJdugXWy+mgJJTPW6KjTY4jPtfCl6x/yVr8YclVa8XO0JFzOme2LMV
|
|
||||||
Ylc/ixVEa66UpxRNrg5yWHS26KcB1lE3GLERoRBKF7nsyGqGY4X9TypBwglCVoqK
|
|
||||||
3dKVGwCvFur+oPnt/C5pwR6UmUV/Ppf1EaRD7Po+xcyJSeCvszG3FH4iHsDHnjLe
|
|
||||||
DR6lxouvMCb+aKJi9d0xowOjhbKoFMF179t4SVnptQeq+U6ui3cPKUjia7Zh1tZT
|
|
||||||
AgMBAAGjLzAtMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgUgMBMGA1UdJQQMMAoGCCsG
|
|
||||||
AQUFBwMBMA0GCSqGSIb3DQEBCwUAA4IBAQB2jlDPiZfP/whsvvFn43g37QMwX5ST
|
|
||||||
Z5OpmEFnFjAH3ec0PPqPrKYEu00q5wEC+8L6uVH8FHOFf11JLH4wl11/C/mvE92D
|
|
||||||
qZtGG8KCnG2+rk5OJPGX+28Z+OnCZlXOjQ8qd2x5KtIW50JuXJ3cbDRHtF/TVanm
|
|
||||||
Exu+TCBeToNwbcU2sfQnbljkUTj4idUFz0pq3uvw3dA4R1J2foungPAYXSWcVhtb
|
|
||||||
RYtG8epIvkAyyUE5nY3kC05AUml6gSZkrJiYM5I1IJTX1lQ7Pv2yxRBZUtTx33rP
|
|
||||||
ccnsW6tbHTDBG8UDHx4LKHErdWFgCJWI81EUEcTip9g2zCOGTWKnpz+z
|
|
||||||
-----END CERTIFICATE-----
|
|
||||||
|
|
@ -1,18 +0,0 @@
|
||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIIC9jCCAd6gAwIBAgIBAjANBgkqhkiG9w0BAQsFADATMREwDwYDVQQDDAhNeVRl
|
|
||||||
c3RDQTAeFw0xNjEwMzEwNzE1NDZaFw0xNzEwMzEwNzE1NDZaMDkxJjAkBgNVBAMT
|
|
||||||
HWRlbmdoYWlndWlkZU1hY0Jvb2stQWlyLmxvY2FsMQ8wDQYDVQQKEwZjbGllbnQw
|
|
||||||
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPMkieMtJO4PGIQG30uxI
|
|
||||||
SEoRJoF2w0ufFhZGYCEaqFlHaSoc6nTiCUmnxadDpjkNBs4R6RDfM9zPJ0QdgSFO
|
|
||||||
OJsWgQEHym/EQTcEx11+/2NDZWMJyZdpWZlU57SwHfWDwYa2XFX1bV+pAvhB8cli
|
|
||||||
wCkygTwp1cZcwQpb8TfZySy8r5mwrWq2nhCQPtYqMxjNjpR/UeeZzt+Uh3CEXQ8h
|
|
||||||
omjGinDXnnGwrYwBEP9G6fzTvyCWTyrsWC1Q37oAMzbkwFRoIBSAQWXBv9hgI08s
|
|
||||||
IBYvXnRGKWOJZGxAP4a4TvpFS+nqi+fFVn4ktUfcH3PoSMh7PKavrFT2hQaryLt1
|
|
||||||
AgMBAAGjLzAtMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgeAMBMGA1UdJQQMMAoGCCsG
|
|
||||||
AQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQAeimI8AQBFWiE9/Nf/0radux355mod
|
|
||||||
5vPLbKn6I6nzb/sS/Ug8SMoFnkhncwj+XOgTSliUyWcwOB11UDVJbUIkB/x+Qo3w
|
|
||||||
hvrATTdby2WdFNQvH4X7PmP8asDDN7ZxoLyRmuhjL4avJ3giwRcuQK4cB35b+Lb2
|
|
||||||
p1e7hW81RaV7OEc0o4/vJgPvv9N7wvUuipwJns6PrN7VDn99lT8zWrt2pQ06e2mk
|
|
||||||
jDuXulVpiUtLHJhTnABkCaKiHWCYAFfMjFeRb3gUXKqShzOyDSGWY91YMID/HE4r
|
|
||||||
sVLm2mD1zurue8EmYtQQ6uiJIW9SzvshMHG6EA5QWA1ytoalfePbvf+c
|
|
||||||
-----END CERTIFICATE-----
|
|
||||||
|
|
@ -1,27 +0,0 @@
|
||||||
-----BEGIN RSA PRIVATE KEY-----
|
|
||||||
MIIEpQIBAAKCAQEApjzJInjLSTuDxiEBt9LsSEhKESaBdsNLnxYWRmAhGqhZR2kq
|
|
||||||
HOp04glJp8WnQ6Y5DQbOEekQ3zPczydEHYEhTjibFoEBB8pvxEE3BMddfv9jQ2Vj
|
|
||||||
CcmXaVmZVOe0sB31g8GGtlxV9W1fqQL4QfHJYsApMoE8KdXGXMEKW/E32cksvK+Z
|
|
||||||
sK1qtp4QkD7WKjMYzY6Uf1Hnmc7flIdwhF0PIaJoxopw155xsK2MARD/Run8078g
|
|
||||||
lk8q7FgtUN+6ADM25MBUaCAUgEFlwb/YYCNPLCAWL150RiljiWRsQD+GuE76RUvp
|
|
||||||
6ovnxVZ+JLVH3B9z6EjIezymr6xU9oUGq8i7dQIDAQABAoIBAFkHEMjPXD96ChZf
|
|
||||||
suXZpgUIAfKxZoBOEv+9+mvyK4h1RGsEHTOjNLmhM7sQFYYbTU52qIHbCdgflE+0
|
|
||||||
vbv3XfjgQ96HdB/SAI1gR7DdfGr5JxX/BE1HkzkubPmVpaT0RnoreJPNW5O24ZZI
|
|
||||||
KuBWNv4V33pWz/uvqy4djAi1ZK3TPDhn9cVCMwV/ISCPlofrNDB/4ZNOMeaQgiR+
|
|
||||||
sGqv+Q0ok2ao7Y04QHPh5i+5o+5oBoiJAO/49q9uPdpO181/8H71jll0QL+h5Off
|
|
||||||
nyWkAAOcgEeX9T4ZnfTUivGdSwB/Y+LS97Ozdr6kp5Fdk8WdDn0DL4fHRrnJ4IJD
|
|
||||||
EIAn/sECgYEA2oOCRBMccr49wbu+cKlkICt/4ARzJWKysdLlK0tYQknkDK1bzoHO
|
|
||||||
9JerRJL4E9bKp8zNlobfP1hWV0TFpwYsK3RvZoLvCwaSHeqUCZ4wQvKrWP1FieJ2
|
|
||||||
5kjO5iMvXiy/kNHdTEXsj0x6RKuUSVgzNIuILvCCQ9Z7JVa/3NWS1SkCgYEAwsF0
|
|
||||||
TWxCjryQv8y4mFSUlyF+y+ntnWAvpe/1Wv3+dNdhsccUfcq3zPMuLEj5DEoIvlTy
|
|
||||||
jLkFLVJ468Ou7S1oSVetVT3wWoLP2eFDEU/sYjjPdf4IMSO1jWIPLC3WV7zsFb62
|
|
||||||
jwG2en1qfz8AxrVl+zj4lWCbgA9Soi41NMiCUW0CgYEAokQEST8T4hVp0OL1Qb5Y
|
|
||||||
bxc+Z4GGbF3Fqw2cRrE1wkwSwGNACLMWl0XF1i95b2oSpdcNWFmhkO2teDLGwAhy
|
|
||||||
ZnaZfzt9/ecMPJEFC7tfxWdlXLj/mawFdW7dzcKVG08JlqZxuoE2cRduuG3duTV5
|
|
||||||
GO0A3TKW2X99hTXNVlV3KzkCgYEAsaE8cHkzY3h9FVKlctqCBC3atiWQQZ+/Fbv8
|
|
||||||
rpdHBE6Fnl4TRIAmj9mk3WNZM2o6+04DQ3JlVGcKPw7ldxGZMnuzbjHmDMeOyAx6
|
|
||||||
3UlmMlfacKXX1unY5zDu4b6U5sU7FsIxQ9GuG55UCebu0E4Wy8G0iJnqeix/k8hN
|
|
||||||
Yu0WXykCgYEAo0kIm7sh9j0+r419Lo2kT4zlzFlNdJEa4+lFVISRqouDuhUO8VFE
|
|
||||||
/ZpGRcqIM7dH6iBM2Htasf7l/hyWKzDEvWCEpa4icicFYAJ92AgK7UBWbNbhueof
|
|
||||||
PyVx5G2o7amvyZNtJYUo4TpJ9eH5YbsBRBqWCJcBUAfrItrprxB1LMs=
|
|
||||||
-----END RSA PRIVATE KEY-----
|
|
||||||
|
|
@ -1,27 +0,0 @@
|
||||||
-----BEGIN RSA PRIVATE KEY-----
|
|
||||||
MIIEpAIBAAKCAQEAuBJ2uL4Fq88FAdIRltb9LyvfOhYVOWXWM+R+TBqJ31sL/PZ0
|
|
||||||
dg5X7Ug1xLyhcnNjE/NRhptelSb95laUCS7igMSwS2O2tc0qyXboF1svpoCSUz1u
|
|
||||||
io02OIz7Xwpesf8la/GHJVWvFztCRczpntizFWJXP4sVRGuulKcUTa4Oclh0tuin
|
|
||||||
AdZRNxixEaEQShe57MhqhmOF/U8qQcIJQlaKit3SlRsArxbq/qD57fwuacEelJlF
|
|
||||||
fz6X9RGkQ+z6PsXMiUngr7MxtxR+Ih7Ax54y3g0epcaLrzAm/miiYvXdMaMDo4Wy
|
|
||||||
qBTBde/beElZ6bUHqvlOrot3DylI4mu2YdbWUwIDAQABAoIBADXYWNhT5c7LYTiW
|
|
||||||
HcUVIL0CxWr1eMHwk0dcyME0Zi5rMMePxKOgMIJdxDTHxSZ4sHvuimOo4XMaE92k
|
|
||||||
Z+uDxohKgROcmJ735FNIsD3c08SOCb/F0adABaNnQkUcAHVrIKRB4/m85doS4KEQ
|
|
||||||
fyqTU1enC8Svx8nbAhfEBEFw8BLsZD9UnQAEAU5W9S5aKPHNrYRDz5UE0ZP28ixC
|
|
||||||
4PtCew96uCqA0u+xZnWCGawF27FD9P88pcYSJqebF1iFYkXrAwdhAbqewHOqQJXf
|
|
||||||
KJpbpjflBvZr/oTVZ3GAnnHnZDiusFmCKIHB9dKimHMdTFVIU2ikOeJZLtgXsBjb
|
|
||||||
Wn3Fa8kCgYEA2fK0t9NPmELw43D7VoCNeUmu6KmLLd7CeRiQ/OkPLKTqrudnUZGi
|
|
||||||
uMinPFijGTLX3SmByAVOkzMKBQOYF+eB1X24kbRLmL4JKzr04hSqOKqG5gJctC+x
|
|
||||||
V5qQX7ZxrNxFRiSodILbnQN/z1gwZMfrAU0t0EKIKjZR3lpj8CELv1cCgYEA2DWn
|
|
||||||
9V6PCZPcHzoFabhb8DJFglUTHk0zINVe97qldvMvn0MgsjgyS2j954nX8ef7uE1O
|
|
||||||
Cf+9nN709Fu8kEC7/KzWXxP3/O58TfJ6NivCQSr5i0OJLumQMVNrS+u/VG1PaVbS
|
|
||||||
2oCwP3QFayOxZSj9wq2MARd1JkqzHmi8skZLz2UCgYEAgtnv3En3CLBwFe14SPgH
|
|
||||||
eGFfrPpVwGV0luXD7sQyQxiEehwecN+iNZTqqxWAXpmi9np8G83r3f6PrnD4+Kka
|
|
||||||
z0Wa8Yewt3So5paP/chwZnMjaKbUZ64WqET5Fy3fU+wvfyx1IvaJydwW+TK2Y1uP
|
|
||||||
4Yknz1iSjd1tC7VzOPFuLyMCgYBrTFWKQ98glayMIrNFACVAUvKD98yBITbaeImk
|
|
||||||
z5AGNDHSC/JR/+mV2wkGuzXb65DUqiisdaqYC13tVwmBXV7tyqiojrRnZcNyu39D
|
|
||||||
GvxQcw9cuat/CJJyqD97cgeF0qmyUVBa97qAAwgdX51N4sXss0vjzsxosHGsCbZ7
|
|
||||||
kr9UsQKBgQCMTtdCeA+uK/OeJtzf4CYZKR9xllQ+P6gCtbQ7WHuLBX/x+ZhvTC0p
|
|
||||||
qVLVWwFsJ6ivc1f74sy8hZPiePk9fqAqA1JIjDHrof0M3TxRVFvB7dej5XIYVirn
|
|
||||||
521DyZGfE+N7HA7qW5cGKZT0+UYLVp4gnv88nNKDuS18lafy8JRrfQ==
|
|
||||||
-----END RSA PRIVATE KEY-----
|
|
||||||
|
|
@ -1,479 +0,0 @@
|
||||||
|
|
||||||
##===================================================================
|
|
||||||
## EMQ Configuration R2.2
|
|
||||||
##===================================================================
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## Cluster
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## The cluster Id
|
|
||||||
cluster.id = emq
|
|
||||||
|
|
||||||
## The multicast address and port.
|
|
||||||
cluster.multicast = 239.192.0.1:44369
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## Node Args
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Node name
|
|
||||||
node.name = emqttd@127.0.0.1
|
|
||||||
|
|
||||||
## Cookie for distributed node
|
|
||||||
node.cookie = emqsecretcookie
|
|
||||||
|
|
||||||
## SMP support: enable, auto, disable
|
|
||||||
node.smp = auto
|
|
||||||
|
|
||||||
## vm.args: -heart
|
|
||||||
## Heartbeat monitoring of an Erlang runtime system
|
|
||||||
## Value should be 'on' or comment the line
|
|
||||||
## node.heartbeat = on
|
|
||||||
|
|
||||||
## Enable kernel poll
|
|
||||||
node.kernel_poll = on
|
|
||||||
|
|
||||||
## async thread pool
|
|
||||||
node.async_threads = 32
|
|
||||||
|
|
||||||
## Erlang Process Limit
|
|
||||||
node.process_limit = 256000
|
|
||||||
|
|
||||||
## Sets the maximum number of simultaneously existing ports for this system
|
|
||||||
node.max_ports = 65536
|
|
||||||
|
|
||||||
## Set the distribution buffer busy limit (dist_buf_busy_limit)
|
|
||||||
node.dist_buffer_size = 32MB
|
|
||||||
|
|
||||||
## Max ETS Tables.
|
|
||||||
## Note that mnesia and SSL will create temporary ets tables.
|
|
||||||
node.max_ets_tables = 256000
|
|
||||||
|
|
||||||
## Tweak GC to run more often
|
|
||||||
node.fullsweep_after = 1000
|
|
||||||
|
|
||||||
## Crash dump
|
|
||||||
node.crash_dump = {{ platform_log_dir }}/crash.dump
|
|
||||||
|
|
||||||
## Distributed node ticktime
|
|
||||||
node.dist_net_ticktime = 60
|
|
||||||
|
|
||||||
## Distributed node port range
|
|
||||||
node.dist_listen_min = 6369
|
|
||||||
node.dist_listen_max = 6369
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## Log
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Set the log dir
|
|
||||||
log.dir = {{ platform_log_dir }}
|
|
||||||
|
|
||||||
## Console log. Enum: off, file, console, both
|
|
||||||
log.console = console
|
|
||||||
|
|
||||||
## Console log level. Enum: debug, info, notice, warning, error, critical, alert, emergency
|
|
||||||
log.console.level = error
|
|
||||||
|
|
||||||
## Syslog. Enum: on, off
|
|
||||||
log.syslog = on
|
|
||||||
|
|
||||||
## syslog level. Enum: debug, info, notice, warning, error, critical, alert, emergency
|
|
||||||
log.syslog.level = error
|
|
||||||
|
|
||||||
## Console log file
|
|
||||||
## log.console.file = {{ platform_log_dir }}/console.log
|
|
||||||
|
|
||||||
## Error log file
|
|
||||||
log.error.file = {{ platform_log_dir }}/error.log
|
|
||||||
|
|
||||||
## Enable the crash log. Enum: on, off
|
|
||||||
log.crash = on
|
|
||||||
|
|
||||||
log.crash.file = {{ platform_log_dir }}/crash.log
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## Allow Anonymous and Default ACL
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Allow Anonymous authentication
|
|
||||||
mqtt.allow_anonymous = true
|
|
||||||
|
|
||||||
## ACL nomatch
|
|
||||||
mqtt.acl_nomatch = allow
|
|
||||||
|
|
||||||
## Default ACL File
|
|
||||||
mqtt.acl_file = {{ platform_etc_dir }}/acl.conf
|
|
||||||
|
|
||||||
## Cache ACL for PUBLISH
|
|
||||||
mqtt.cache_acl = true
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## MQTT Protocol
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Max ClientId Length Allowed.
|
|
||||||
mqtt.max_clientid_len = 1024
|
|
||||||
|
|
||||||
## Max Packet Size Allowed, 64K by default.
|
|
||||||
mqtt.max_packet_size = 64KB
|
|
||||||
|
|
||||||
## Check Websocket Protocol Header. Enum: on, off
|
|
||||||
mqtt.websocket_protocol_header = on
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## MQTT Connection
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Force GC: integer. Value 0 disabled the Force GC.
|
|
||||||
mqtt.conn.force_gc_count = 100
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## MQTT Client
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Client Idle Timeout (Second)
|
|
||||||
mqtt.client.idle_timeout = 30s
|
|
||||||
|
|
||||||
## Max publish rate of Messages
|
|
||||||
## mqtt.client.max_publish_rate = 5
|
|
||||||
|
|
||||||
## Enable client Stats: on | off
|
|
||||||
mqtt.client.enable_stats = off
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## MQTT Session
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Max Number of Subscriptions, 0 means no limit.
|
|
||||||
mqtt.session.max_subscriptions = 0
|
|
||||||
|
|
||||||
## Upgrade QoS?
|
|
||||||
mqtt.session.upgrade_qos = off
|
|
||||||
|
|
||||||
## Max Size of the Inflight Window for QoS1 and QoS2 messages
|
|
||||||
## 0 means no limit
|
|
||||||
mqtt.session.max_inflight = 32
|
|
||||||
|
|
||||||
## Retry Interval for redelivering QoS1/2 messages.
|
|
||||||
mqtt.session.retry_interval = 20s
|
|
||||||
|
|
||||||
## Client -> Broker: Max Packets Awaiting PUBREL, 0 means no limit
|
|
||||||
mqtt.session.max_awaiting_rel = 100
|
|
||||||
|
|
||||||
## Awaiting PUBREL Timeout
|
|
||||||
mqtt.session.await_rel_timeout = 20s
|
|
||||||
|
|
||||||
## Enable Statistics: on | off
|
|
||||||
mqtt.session.enable_stats = off
|
|
||||||
|
|
||||||
## Expired after 1 day:
|
|
||||||
## w - week
|
|
||||||
## d - day
|
|
||||||
## h - hour
|
|
||||||
## m - minute
|
|
||||||
## s - second
|
|
||||||
mqtt.session.expiry_interval = 2h
|
|
||||||
|
|
||||||
## Ignore message from self publish
|
|
||||||
mqtt.session.ignore_loop_deliver = false
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## MQTT Message Queue
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Type: simple | priority
|
|
||||||
mqtt.mqueue.type = simple
|
|
||||||
|
|
||||||
## Topic Priority: 0~255, Default is 0
|
|
||||||
## mqtt.mqueue.priority = topic/1=10,topic/2=8
|
|
||||||
|
|
||||||
## Max queue length. Enqueued messages when persistent client disconnected,
|
|
||||||
## or inflight window is full. 0 means no limit.
|
|
||||||
mqtt.mqueue.max_length = 1000
|
|
||||||
|
|
||||||
## Low-water mark of queued messages
|
|
||||||
mqtt.mqueue.low_watermark = 20%
|
|
||||||
|
|
||||||
## High-water mark of queued messages
|
|
||||||
mqtt.mqueue.high_watermark = 60%
|
|
||||||
|
|
||||||
## Queue Qos0 messages?
|
|
||||||
mqtt.mqueue.store_qos0 = true
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## MQTT Broker and PubSub
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## System Interval of publishing broker $SYS Messages
|
|
||||||
mqtt.broker.sys_interval = 60
|
|
||||||
|
|
||||||
## PubSub Pool Size. Default should be scheduler numbers.
|
|
||||||
mqtt.pubsub.pool_size = 8
|
|
||||||
|
|
||||||
mqtt.pubsub.by_clientid = true
|
|
||||||
|
|
||||||
## Subscribe Asynchronously
|
|
||||||
mqtt.pubsub.async = true
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## MQTT Bridge
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Bridge Queue Size
|
|
||||||
mqtt.bridge.max_queue_len = 10000
|
|
||||||
|
|
||||||
## Ping Interval of bridge node. Unit: Second
|
|
||||||
mqtt.bridge.ping_down_interval = 1
|
|
||||||
|
|
||||||
##-------------------------------------------------------------------
|
|
||||||
## MQTT Plugins
|
|
||||||
##-------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Dir of plugins' config
|
|
||||||
mqtt.plugins.etc_dir ={{ platform_etc_dir }}/plugins/
|
|
||||||
|
|
||||||
## File to store loaded plugin names.
|
|
||||||
mqtt.plugins.loaded_file = {{ platform_data_dir }}/loaded_plugins
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## MQTT Listeners
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## External TCP Listener
|
|
||||||
|
|
||||||
## External TCP Listener: 1883, 127.0.0.1:1883, ::1:1883
|
|
||||||
listener.tcp.external = 0.0.0.0:1883
|
|
||||||
|
|
||||||
## Size of acceptor pool
|
|
||||||
listener.tcp.external.acceptors = 16
|
|
||||||
|
|
||||||
## Maximum number of concurrent clients
|
|
||||||
listener.tcp.external.max_clients = 102400
|
|
||||||
|
|
||||||
#listener.tcp.external.mountpoint = external/
|
|
||||||
|
|
||||||
## Rate Limit. Format is 'burst,rate', Unit is KB/Sec
|
|
||||||
#listener.tcp.external.rate_limit = 100,10
|
|
||||||
|
|
||||||
#listener.tcp.external.access.1 = allow 192.168.0.0/24
|
|
||||||
|
|
||||||
listener.tcp.external.access.2 = allow all
|
|
||||||
|
|
||||||
## Proxy Protocol V1/2
|
|
||||||
## listener.tcp.external.proxy_protocol = on
|
|
||||||
## listener.tcp.external.proxy_protocol_timeout = 3s
|
|
||||||
|
|
||||||
## TCP Socket Options
|
|
||||||
listener.tcp.external.backlog = 1024
|
|
||||||
|
|
||||||
#listener.tcp.external.recbuf = 4KB
|
|
||||||
|
|
||||||
#listener.tcp.external.sndbuf = 4KB
|
|
||||||
|
|
||||||
listener.tcp.external.buffer = 4KB
|
|
||||||
|
|
||||||
listener.tcp.external.nodelay = true
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## Internal TCP Listener
|
|
||||||
|
|
||||||
## Internal TCP Listener: 11883, 127.0.0.1:11883, ::1:11883
|
|
||||||
listener.tcp.internal = 127.0.0.1:11883
|
|
||||||
|
|
||||||
## Size of acceptor pool
|
|
||||||
listener.tcp.internal.acceptors = 16
|
|
||||||
|
|
||||||
## Maximum number of concurrent clients
|
|
||||||
listener.tcp.internal.max_clients = 102400
|
|
||||||
|
|
||||||
#listener.tcp.external.mountpoint = internal/
|
|
||||||
|
|
||||||
## Rate Limit. Format is 'burst,rate', Unit is KB/Sec
|
|
||||||
## listener.tcp.internal.rate_limit = 1000,100
|
|
||||||
|
|
||||||
## TCP Socket Options
|
|
||||||
listener.tcp.internal.backlog = 512
|
|
||||||
|
|
||||||
listener.tcp.internal.tune_buffer = on
|
|
||||||
|
|
||||||
listener.tcp.internal.buffer = 1MB
|
|
||||||
|
|
||||||
listener.tcp.internal.recbuf = 4KB
|
|
||||||
|
|
||||||
listener.tcp.internal.sndbuf = 1MB
|
|
||||||
|
|
||||||
listener.tcp.internal.nodelay = true
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## External SSL Listener
|
|
||||||
|
|
||||||
## SSL Listener: 8883, 127.0.0.1:8883, ::1:8883
|
|
||||||
listener.ssl.external = 8883
|
|
||||||
|
|
||||||
## Size of acceptor pool
|
|
||||||
listener.ssl.external.acceptors = 16
|
|
||||||
|
|
||||||
## Maximum number of concurrent clients
|
|
||||||
listener.ssl.external.max_clients = 1024
|
|
||||||
|
|
||||||
## listener.ssl.external.mountpoint = inbound/
|
|
||||||
|
|
||||||
## Rate Limit. Format is 'burst,rate', Unit is KB/Sec
|
|
||||||
## listener.ssl.external.rate_limit = 100,10
|
|
||||||
|
|
||||||
## Proxy Protocol V1/2
|
|
||||||
## listener.ssl.external.proxy_protocol = on
|
|
||||||
## listener.ssl.external.proxy_protocol_timeout = 3s
|
|
||||||
|
|
||||||
listener.ssl.external.access.1 = allow all
|
|
||||||
|
|
||||||
### SSL Options. See http://erlang.org/doc/man/ssl.html
|
|
||||||
|
|
||||||
## Configuring SSL Options. See http://erlang.org/doc/man/ssl.html
|
|
||||||
### TLS only for POODLE attack
|
|
||||||
## listener.ssl.external.tls_versions = tlsv1.2,tlsv1.1,tlsv1
|
|
||||||
|
|
||||||
### The Ephemeral Diffie-Helman key exchange is a very effective way of
|
|
||||||
### ensuring Forward Secrecy by exchanging a set of keys that never hit
|
|
||||||
### the wire. Since the DH key is effectively signed by the private key,
|
|
||||||
### it needs to be at least as strong as the private key. In addition,
|
|
||||||
### the default DH groups that most of the OpenSSL installations have
|
|
||||||
### are only a handful (since they are distributed with the OpenSSL
|
|
||||||
### package that has been built for the operating system it’s running on)
|
|
||||||
### and hence predictable (not to mention, 1024 bits only).
|
|
||||||
|
|
||||||
### In order to escape this situation, first we need to generate a fresh,
|
|
||||||
### strong DH group, store it in a file and then use the option above,
|
|
||||||
### to force our SSL application to use the new DH group. Fortunately,
|
|
||||||
### OpenSSL provides us with a tool to do that. Simply run:
|
|
||||||
### openssl dhparam -out dh-params.pem 2048
|
|
||||||
|
|
||||||
listener.ssl.external.handshake_timeout = 15s
|
|
||||||
|
|
||||||
listener.ssl.external.keyfile = certs/key.pem
|
|
||||||
|
|
||||||
listener.ssl.external.certfile = certs/cert.pem
|
|
||||||
|
|
||||||
## listener.ssl.external.cacertfile = {{ platform_etc_dir }}/certs/cacert.pem
|
|
||||||
|
|
||||||
## listener.ssl.external.dhfile = {{ platform_etc_dir }}/certs/dh-params.pem
|
|
||||||
|
|
||||||
## listener.ssl.external.verify = verify_peer
|
|
||||||
|
|
||||||
## listener.ssl.external.fail_if_no_peer_cert = true
|
|
||||||
|
|
||||||
### This is the single most important configuration option of an Erlang SSL application.
|
|
||||||
### Ciphers (and their ordering) define the way the client and server encrypt information
|
|
||||||
### over the wire, from the initial Diffie-Helman key exchange, the session key encryption
|
|
||||||
### algorithm and the message digest algorithm. Selecting a good cipher suite is critical
|
|
||||||
### for the application’s data security, confidentiality and performance.
|
|
||||||
### The cipher list above offers:
|
|
||||||
###
|
|
||||||
### A good balance between compatibility with older browsers. It can get stricter for Machine-To-Machine scenarios.
|
|
||||||
### Perfect Forward Secrecy.
|
|
||||||
### No old/insecure encryption and HMAC algorithms
|
|
||||||
###
|
|
||||||
### Most of it was copied from Mozilla’s Server Side TLS article
|
|
||||||
## listener.ssl.external.ciphers = ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-SHA384,ECDHE-RSA-AES256-SHA384,ECDHE-ECDSA-DES-CBC3-SHA,ECDH-ECDSA-AES256-GCM-SHA384,ECDH-RSA-AES256-GCM-SHA384,ECDH-ECDSA-AES256-SHA384,ECDH-RSA-AES256-SHA384,DHE-DSS-AES256-GCM-SHA384,DHE-DSS-AES256-SHA256,AES256-GCM-SHA384,AES256-SHA256,ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-GCM-SHA256,ECDHE-ECDSA-AES128-SHA256,ECDHE-RSA-AES128-SHA256,ECDH-ECDSA-AES128-GCM-SHA256,ECDH-RSA-AES128-GCM-SHA256,ECDH-ECDSA-AES128-SHA256,ECDH-RSA-AES128-SHA256,DHE-DSS-AES128-GCM-SHA256,DHE-DSS-AES128-SHA256,AES128-GCM-SHA256,AES128-SHA256,ECDHE-ECDSA-AES256-SHA,ECDHE-RSA-AES256-SHA,DHE-DSS-AES256-SHA,ECDH-ECDSA-AES256-SHA,ECDH-RSA-AES256-SHA,AES256-SHA,ECDHE-ECDSA-AES128-SHA,ECDHE-RSA-AES128-SHA,DHE-DSS-AES128-SHA,ECDH-ECDSA-AES128-SHA,ECDH-RSA-AES128-SHA,AES128-SHA
|
|
||||||
|
|
||||||
### SSL parameter renegotiation is a feature that allows a client and
|
|
||||||
### a server to renegotiate the parameters of the SSL connection on the fly.
|
|
||||||
### RFC 5746 defines a more secure way of doing this. By enabling secure renegotiation,
|
|
||||||
### you drop support for the insecure renegotiation, prone to MitM attacks.
|
|
||||||
## listener.ssl.external.secure_renegotiate = off
|
|
||||||
|
|
||||||
### A performance optimization setting, it allows clients to reuse
|
|
||||||
### pre-existing sessions, instead of initializing new ones.
|
|
||||||
### Read more about it here.
|
|
||||||
## listener.ssl.external.reuse_sessions = on
|
|
||||||
|
|
||||||
### An important security setting, it forces the cipher to be set based on
|
|
||||||
### the server-specified order instead of the client-specified order,
|
|
||||||
### hence enforcing the (usually more properly configured) security
|
|
||||||
### ordering of the server administrator.
|
|
||||||
## listener.ssl.external.honor_cipher_order = on
|
|
||||||
|
|
||||||
### Use the CN or DN value from the client certificate as a username.
|
|
||||||
### Notice: 'verify' should be configured as 'verify_peer'
|
|
||||||
## listener.ssl.external.peer_cert_as_username = cn
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## External MQTT/WebSocket Listener
|
|
||||||
|
|
||||||
listener.ws.external = 8083
|
|
||||||
|
|
||||||
listener.ws.external.acceptors = 4
|
|
||||||
|
|
||||||
listener.ws.external.max_clients = 64
|
|
||||||
|
|
||||||
listener.ws.external.access.1 = allow all
|
|
||||||
|
|
||||||
## TCP Options
|
|
||||||
listener.ws.external.backlog = 1024
|
|
||||||
|
|
||||||
listener.ws.external.recbuf = 4KB
|
|
||||||
|
|
||||||
listener.ws.external.sndbuf = 4KB
|
|
||||||
|
|
||||||
listener.ws.external.buffer = 4KB
|
|
||||||
|
|
||||||
listener.ws.external.nodelay = true
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## External MQTT/WebSocket/SSL Listener
|
|
||||||
|
|
||||||
listener.wss.external = 8084
|
|
||||||
|
|
||||||
listener.wss.external.acceptors = 4
|
|
||||||
|
|
||||||
listener.wss.external.max_clients = 64
|
|
||||||
|
|
||||||
listener.wss.external.access.1 = allow all
|
|
||||||
|
|
||||||
## SSL Options
|
|
||||||
listener.wss.external.handshake_timeout = 15s
|
|
||||||
|
|
||||||
listener.wss.external.keyfile = certs/key.pem
|
|
||||||
|
|
||||||
listener.wss.external.certfile = certs/cert.pem
|
|
||||||
|
|
||||||
## listener.wss.external.cacertfile = {{ platform_etc_dir }}/certs/cacert.pem
|
|
||||||
|
|
||||||
## listener.wss.external.verify = verify_peer
|
|
||||||
|
|
||||||
## listener.wss.external.fail_if_no_peer_cert = true
|
|
||||||
|
|
||||||
##--------------------------------------------------------------------
|
|
||||||
## HTTP Management API Listener
|
|
||||||
|
|
||||||
listener.api.mgmt = 127.0.0.1:8080
|
|
||||||
|
|
||||||
listener.api.mgmt.acceptors = 4
|
|
||||||
|
|
||||||
listener.api.mgmt.max_clients = 64
|
|
||||||
|
|
||||||
listener.api.mgmt.access.1 = allow all
|
|
||||||
|
|
||||||
##-------------------------------------------------------------------
|
|
||||||
## System Monitor
|
|
||||||
##-------------------------------------------------------------------
|
|
||||||
|
|
||||||
## Long GC, don't monitor in production mode for:
|
|
||||||
## https://github.com/erlang/otp/blob/feb45017da36be78d4c5784d758ede619fa7bfd3/erts/emulator/beam/erl_gc.c#L421
|
|
||||||
sysmon.long_gc = false
|
|
||||||
|
|
||||||
## Long Schedule(ms)
|
|
||||||
sysmon.long_schedule = 240
|
|
||||||
|
|
||||||
## 8M words. 32MB on 32-bit VM, 64MB on 64-bit VM.
|
|
||||||
sysmon.large_heap = 8MB
|
|
||||||
|
|
||||||
## Busy Port
|
|
||||||
sysmon.busy_port = false
|
|
||||||
|
|
||||||
## Busy Dist Port
|
|
||||||
sysmon.busy_dist_port = true
|
|
||||||
|
|
||||||
File diff suppressed because it is too large
Load Diff
Loading…
Reference in New Issue