Added implementation of SSL support (ssl+mqtt or mqtts)

2014-05-22 23:53:58 +02:00
parent 80eb7d7cea
commit cd771f1432
7 changed files with 248 additions and 10 deletions
@@ -0,0 +1,134 @@
+package org.dna.mqtt.moquette.server;
+
+import java.io.File;
+import java.io.FileInputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.security.KeyManagementException;
+import java.security.KeyStore;
+import java.security.KeyStoreException;
+import java.security.NoSuchAlgorithmException;
+import java.security.UnrecoverableKeyException;
+import java.security.cert.CertificateException;
+import javax.net.SocketFactory;
+import javax.net.ssl.KeyManagerFactory;
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.SSLServerSocketFactory;
+import javax.net.ssl.SSLSocketFactory;
+import javax.net.ssl.TrustManager;
+import javax.net.ssl.TrustManagerFactory;
+import org.eclipse.paho.client.mqttv3.IMqttClient;
+import org.eclipse.paho.client.mqttv3.MqttClient;
+import org.eclipse.paho.client.mqttv3.MqttClientPersistence;
+import org.eclipse.paho.client.mqttv3.MqttConnectOptions;
+import org.eclipse.paho.client.mqttv3.persist.MqttDefaultFilePersistence;
+import org.junit.After;
+import static org.junit.Assert.assertFalse;
+import org.junit.Before;
+import org.junit.BeforeClass;
+import org.junit.Test;
+import org.slf4j.Logger;
+import org.slf4j.LoggerFactory;
+
+/**
+ * Check that Moquette could also handle SSL.
+ * 
+ * @author andrea
+ */
+public class ServerIntegrationSSLTest {
+    private static final Logger LOG = LoggerFactory.getLogger(ServerIntegrationSSLTest.class);
+
+    Server m_server;
+    static MqttClientPersistence s_dataStore;
+
+    IMqttClient m_client;
+    TestCallback m_callback;
+
+    @BeforeClass
+    public static void beforeTests() {
+        String tmpDir = System.getProperty("java.io.tmpdir");
+        s_dataStore = new MqttDefaultFilePersistence(tmpDir);
+    }
+
+    protected void startServer() throws IOException {
+        String file = getClass().getResource("/").getPath();
+        System.setProperty("moquette.path", file);
+        m_server = new Server();
+        m_server.startServer();
+    }
+
+    @Before
+    public void setUp() throws Exception {
+        File dbFile = new File(Server.STORAGE_FILE_PATH);
+        assertFalse(String.format("The DB storagefile %s already exists", Server.STORAGE_FILE_PATH), dbFile.exists());
+        
+        startServer();
+
+        m_client = new MqttClient("ssl://localhost:8883", "TestClient", s_dataStore);
+//        m_client = new MqttClient("ssl://test.mosquitto.org:8883", "TestClient", s_dataStore);
+        
+        m_callback = new TestCallback();
+        m_client.setCallback(m_callback);
+    }
+
+    @After
+    public void tearDown() throws Exception {
+        if (m_client.isConnected()) {
+            m_client.disconnect();
+        }
+
+        m_server.stopServer();
+        File dbFile = new File(Server.STORAGE_FILE_PATH);
+        if (dbFile.exists()) {
+            dbFile.delete();
+        }
+        assertFalse(dbFile.exists());
+    }
+    
+    @Test
+    public void checkSupportSSL() throws Exception {
+        LOG.info("*** checkSupportSSL ***");
+        SSLSocketFactory ssf = configureSSLSocketFactory();
+        
+        MqttConnectOptions options = new MqttConnectOptions();
+        options.setSocketFactory(ssf);
+        m_client.connect(options);
+        m_client.subscribe("/topic", 0);
+        m_client.disconnect();
+    }
+
+    /**
+     * keystore generated into test/resources with command:
+     * 
+     * keytool -keystore clientkeystore.jks -alias testclient -genkey -keyalg RSA
+     * -> mandatory to put the name surname
+     * -> password is passw0rd
+     * -> type yes at the end
+     * 
+     * to generate the crt file from the keystore
+     * -- keytool -certreq -alias testclient -keystore clientkeystore.jks -file testclient.csr
+     * 
+     * keytool -export -alias testclient -keystore clientkeystore.jks -file testclient.crt
+     * 
+     * to import an existing certificate:
+     * keytool -keystore clientkeystore.jks -import -alias testclient -file testclient.crt -trustcacerts
+     */
+    private SSLSocketFactory configureSSLSocketFactory() throws KeyManagementException, NoSuchAlgorithmException, UnrecoverableKeyException, IOException, CertificateException, KeyStoreException {
+        KeyStore ks = KeyStore.getInstance("JKS");
+        InputStream jksInputStream = getClass().getClassLoader().getResourceAsStream("clientkeystore.jks");
+        ks.load(jksInputStream, "passw0rd".toCharArray());
+
+        KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());
+        kmf.init(ks, "passw0rd".toCharArray());
+
+        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
+        tmf.init(ks);
+
+        SSLContext sc = SSLContext.getInstance("TLS"); 
+        TrustManager[] trustManagers = tmf.getTrustManagers(); 
+        sc.init(kmf.getKeyManagers(), trustManagers, null); 
+
+        SSLSocketFactory ssf = sc.getSocketFactory();
+        return ssf;
+    }
+}