一直在微信公眾號上使用mqtt協議控制智慧裝置，但新需求是要在小程式上執行。
小程式要求:
1、要求介面使用HTTPS，SSL1.2以上，
2、ws需要修改為wss,wss後面不能跟埠號。
花費了一些時間解決,記錄整個過程。

開啟配置WSS

修改emq.conf配置檔案

首先想到的是修改emq.conf配置檔案
位置是:/etc/emqttd/emq.conf
根據官方文件新增相關證書

##--------------------------------------------------------------------
## External MQTT/WebSocket/SSL Listener
 


listener.wss.external = 8084

listener.wss.external.acceptors = 4

listener.wss.external.max_clients = 64

listener.wss.external.access.1 = allow all

## SSL Options
listener.wss.external.handshake_timeout = 15s

#listener.wss.external.keyfile = /etc/emqttd/certs/key.pem
 listener.wss.external.keyfile = /etc/emqttd/certs/web.com
 
.key

#listener.wss.external.certfile = /etc/emqttd/certs/cert.pem
 listener.wss.external.certfile = /etc/emqttd/certs/web.com.pem

## listener.wss.external.cacertfile = /etc/emqttd/certs/cacert.pem

## listener.wss.external.verify = verify_peer

## listener.wss.external.fail_if_no_peer_cert = true

重啟服務之後無效果!

升級EMQ版本

後來考慮到可能是版本的問題，將2.3.0升級到最新2.3.4版本，但還是不行。

解決方法

通過ps -ef | grep emqttd發現配置檔案引入的不是/etc/emqttd/emq.conf,
而是-config /var/lib/emqttd/configs/app.2018.02.26.17.56.21.config

emqtt    18682 18665  0 Feb26 pts/1    00:01:03 /usr/lib64/emqttd/erts-9.0/bin/beam.smp -W w -e 256000 -Q 65536 -P 256000 -A 32 -K true -zdbbl 32768 -- -root /usr/lib64/emqttd -progname usr/sbin/emqttd -- -home /var/lib/emqttd -- -boot /usr/lib64/emqttd/releases/2.3/emqttd -mode embedded -boot_var ERTS_LIB_DIR /usr/lib64/emqttd/erts-9.0/../lib -mnesia dir "/var/lib/emqttd/mnesia/[email protected]" -config /var/lib/emqttd/configs/app.2018.02.26.17.56.21.config -kernel net_ticktime 60 -smp auto -setcookie emqsecretcookie -name [email protected]127.0.0.1 -vm_args /var/lib/emqttd/configs/vm.2018.02.26.17.56.21.args -- console

檢視config內容
內容如下:

          {ssl,8883,
               [{connopts,[]},
                {sockopts,
                    [{backlog,1024},
                     {send_timeout,15000},
                     {send_timeout_close,true},
                     {nodelay,true},
                     {reuseaddr,true}]},
                {sslopts,
                    [{handshake_timeout,15000},
                     {keyfile,"/etc/emqttd/certs/key.pem"},
                     {certfile,"/etc/emqttd/certs/cert.pem"},
                     {reuse_sessions,true}]},
                {acceptors,16},
                {max_clients,1024},
                {access,[{allow,all}]}]},
           {wss,8084,
               [{connopts,[]},
                {sockopts,
                    [{backlog,1024},
                     {send_timeout,15000},
                     {send_timeout_close,true},
                     {nodelay,true},
                     {reuseaddr,true}]},
                {sslopts,
                    [{handshake_timeout,15000},
                     {keyfile,"/etc/emqttd/certs/key.pem"},
                     {certfile,"/etc/emqttd/certs/cert.pem"},
                     {reuse_sessions,true}]},
                {acceptors,4},
                {max_clients,64},
                {access,[{allow,all}]}]},

直接將域名證書修改key.pem和cert.pem，然後重啟。
測試成功!

wss對映方法

nginx配置

        location /mqtt {
           access_log /wwwlogs/com.log;
           proxy_pass https://localhost:8084/mqtt;
           proxy_read_timeout 60s;
           proxy_set_header Host $host;
           proxy_set_header X-Real_IP $remote_addr;
           proxy_set_header X-Forwarded-for $remote_addr;
           proxy_http_version 1.1;
           proxy_set_header Upgrade $http_upgrade;
           proxy_set_header Connection 'Upgrade';
        }

修改mqttws庫

修改mqttws31.js庫中的內容，去掉埠號

      if (arguments.length == 2) {
          // host: must be full ws:// uri
          // port: clientId
          clientId = port;
          uri = host;
          var match = uri.match(/^(wss?):\/\/((\[(.+)\])|([^\/]+?))(:(\d+))?(\/.*)$/);
          if (match) {
              host = match[4]||match[2];
              port = parseInt(match[7]);
              path = match[8];
          } else {
              throw new Error(format(ERROR.INVALID_ARGUMENT,[host,"host"]));
          }
      } else {
          if (arguments.length == 3) {
        clientId = path;
        path = "/mqtt";
      }
      if (typeof port !== "number" || port < 0)
        throw new Error(format(ERROR.INVALID_TYPE, [typeof port, "port"]));
      if (typeof path !== "string")
        throw new Error(format(ERROR.INVALID_TYPE, [typeof path, "path"]));

      var ipv6AddSBracket = (host.indexOf(":") != -1 && host.slice(0,1) != "[" && host.slice(-1) != "]");
      // uri = "ws://"+(ipv6AddSBracket?"["+host+"]":host)+":"+port+path;
      //去埠號
      uri = "ws://"+(ipv6AddSBracket?"["+host+"]":host)+path;
    }

注意: 今天發現相關專案web端傳送mqtt訊息提示“com.actions.mqtt.PublishThread - Client is not connected”, 因為重啟了emqttd服務，web端沒有自動連結上mqtt，重新java專案後正常。