Re: [mosquitto-dev] IOT Sandbox server - Secure Websockets?

[Ian Craggs <icraggs@xxxxxxxxxxxxxxxxxxxxxxx>]

Hi Roger,

that would be great.  Any port will do.  I don't know about the 
self-signed certificate, whether browsers will accept that out of the 
box.  I guess the easiest way is to try it and see.

Ian

On 06/15/2015 04:53 PM, Roger Light wrote:
> Hi Ian,
>
> I'll see about getting it supported - but it would be a self signed
> certificate and couldn't be on port 80 or 443. Is that going to be ok?
>
> Cheers,
>
> Roger
>
>
> On Mon, Jun 15, 2015 at 4:48 PM, Ian Craggs
> <icraggs@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
> > Hi Jan,
> >
> > thanks for the info, very helpful.  What I'm trying to do is to default the
> > online Paho web client example to a server which can be connected to.
> > Ideally the Eclipse IoT sandbox server, for obvious reasons :-).
> >
> > Eclipse.org seems to serve up the page as https by default or most of the
> > time, and then the browsers won't allow a non-secure websocket connection
> > out.  I can get a connection to work by loading the page with http rather
> > than https but that takes some effort and is not something I want to ask
> > anyone to do.  The sample utility needs to be updated for connection options
> > and TLS support anyway.  We'll do that in due course (when James has time
> > during or after his stint at Wimbledon).
> >
> > Ian
> >
> >
> > On 06/15/2015 03:27 PM, Jan Weitz wrote:
> >
> > Hi Ian,
> >
> > you might want to try the HiveMQ websocket broker for testing.
> >
> > http://www.hivemq.com/demos/websocket-client/
> >
> > This worked for us in testing before we setup mosquitto with TLS.
> >
> > You might also put a NGINX locally in front of plain websocket mosquitto,
> > without putting any certs in mosquitto.conf, but keeping them in NGINX.
> >
> > ```
> > location /broker/ {
> > access_log off;
> > proxy_pass http://127.0.0.1:40002;
> > proxy_set_header X-Real-IP $remote_addr;
> > proxy_set_header Host $host;
> > proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
> >
> > proxy_http_version 1.1;
> > proxy_set_header Upgrade $http_upgrade;
> >   proxy_set_header Connection "upgrade";
> > }
> > ```
> >
> > Greetings,
> >
> > Jan
> >
> > On 15 Jun 2015, at 15:35, Ian Craggs <icraggs@xxxxxxxxxxxxxxxxxxxxxxx>
> > wrote:
> >
> > Hi Roger,
> >
> > thanks.
> >
> > Ian
> >
> >
> > On 06/15/2015 01:22 PM, Roger Light wrote:
> >
> > Hi Ian,
> >
> > No it doesn't. The websockets interface is provided by
> > apache+mod_websocket_mosquitto, I don't know if it would be possible
> > to have it do TLS.
> >
> > Cheers,
> >
> > Roger
> >
> >
> >
> > On Mon, Jun 15, 2015 at 12:51 PM, Ian Craggs
> > <icraggs@xxxxxxxxxxxxxxxxxxxxxxx> wrote:
> >
> > Does the Mosquitto sandbox server at iot.eclipse.org have a secure (TLS)
> > websockets port?  Is that port 80 as well?
> >
> > Just testing a sample, simple web application for the Paho JavaScript
> > client: https://www.eclipse.org/paho/clients/js/utility/index.html
> >
> > --
> > Ian Craggs
> > icraggs@xxxxxxxxxx                 IBM United Kingdom
> > Paho Project Lead; Committer on Mosquitto
> >
> > _______________________________________________
> > mosquitto-dev mailing list
> > mosquitto-dev@xxxxxxxxxxx
> > To change your delivery options, retrieve your password, or unsubscribe from
> > this list, visit
> > https://dev.eclipse.org/mailman/listinfo/mosquitto-dev
> >
> > _______________________________________________
> > mosquitto-dev mailing list
> > mosquitto-dev@xxxxxxxxxxx
> > To change your delivery options, retrieve your password, or unsubscribe from
> > this list, visit
> > https://dev.eclipse.org/mailman/listinfo/mosquitto-dev
> >
> >
> > --
> > Ian Craggs
> > icraggs@xxxxxxxxxx                 IBM United Kingdom
> > Paho Project Lead; Committer on Mosquitto
> >
> > _______________________________________________
> > mosquitto-dev mailing list
> > mosquitto-dev@xxxxxxxxxxx
> > To change your delivery options, retrieve your password, or unsubscribe from
> > this list, visit
> > https://dev.eclipse.org/mailman/listinfo/mosquitto-dev
> >
> >
> >
> >
> > _______________________________________________
> > mosquitto-dev mailing list
> > mosquitto-dev@xxxxxxxxxxx
> > To change your delivery options, retrieve your password, or unsubscribe from
> > this list, visit
> > https://dev.eclipse.org/mailman/listinfo/mosquitto-dev
> >
> >
> > --
> > Ian Craggs
> > icraggs@xxxxxxxxxx                 IBM United Kingdom
> > Paho Project Lead; Committer on Mosquitto
> >
> >
> > _______________________________________________
> > mosquitto-dev mailing list
> > mosquitto-dev@xxxxxxxxxxx
> > To change your delivery options, retrieve your password, or unsubscribe from
> > this list, visit
> > https://dev.eclipse.org/mailman/listinfo/mosquitto-dev
> _______________________________________________
> mosquitto-dev mailing list
> mosquitto-dev@xxxxxxxxxxx
> To change your delivery options, retrieve your password, or unsubscribe from this list, visit
> https://dev.eclipse.org/mailman/listinfo/mosquitto-dev

--
Ian Craggs
icraggs@xxxxxxxxxx                 IBM United Kingdom
Paho Project Lead; Committer on Mosquitto