证书内容，
allow_anonymous = false
node {
name = “emqx@127.0.0.1”
cookie = “emqxsecretcookie”
data_dir = “/var/lib/emqx”
}
log {
file_handlers.default {
level = warning
file = “/var/log/emqx/emqx.log”
}
}
cluster {
name = emqxcl
discovery_strategy = manual
}
listeners.tcp.default {
bind = “0.0.0.0:1883”
max_connections = 1024000
}
listeners.ssl.default {
bind = “0.0.0.0:8883”
max_connections = 512000
ssl_options {
keyfile = “/etc/emqx/certs/esp.liyingmqtt.top.key”
certfile = “/etc/emqx/certs/esp.liyingmqtt.top.pem”
cacertfile = “/etc/emqx/certs/esp.liyingmqtt.top.pem”
不开启对端验证
verify = verify_none
}
}
listeners.ws.default {
bind = “0.0.0.0:8083”
max_connections = 1024000
websocket.mqtt_path = “/mqtt”
}
listeners.wss.default {
bind = “0.0.0.0:8084”
max_connections = 512000
websocket.mqtt_path = “/mqtt”
ssl_options {
keyfile = “/etc/emqx/certs/esp.liyingmqtt.top.key”
certfile = “/etc/emqx/certs/esp.liyingmqtt.top.pem”
cacertfile = “/etc/emqx/certs/esp.liyingmqtt.top.pem”
}
}
dashboard {
listeners.http {
bind = 18083
}
default_username = “admin”
default_password = “public”
}
authorization {
deny_action = ignore
no_match = allow
sources = [
{
type = file
enable = true
# This file is immutable to EMQX.
# Once new rules are created from dashboard UI or HTTP API,
# the file ‘data/authz/acl.conf’ is used instead of this one
path = “/etc/emqx/acl.conf”
}
]
}
include emqx_enterprise.conf