MQTT Broker Kurulumu: Mosquitto ve Guvenligi

Mosquitto Kurulumu

sudo apt install mosquitto mosquitto-clients -y
sudo systemctl enable --now mosquitto

# Test
mosquitto_sub -t test/# -v &
mosquitto_pub -t test/mesaj -m 'Merhaba'

Kullanici Kimlik Dogrulama

# Sifre dosyasi olustur
sudo mosquitto_passwd -c /etc/mosquitto/passwd emre

# /etc/mosquitto/mosquitto.conf
listener 1883
allow_anonymous false
password_file /etc/mosquitto/passwd

TLS ile Guvenli Baglanti

# Let's Encrypt sertifikasi kullanabilirsiniz veya:
openssl req -x509 -nodes -days 365 -newkey rsa:2048 
    -keyout /etc/mosquitto/certs/broker.key 
    -out /etc/mosquitto/certs/broker.crt

# mosquitto.conf
listener 8883
cafile /etc/mosquitto/certs/ca.crt
certfile /etc/mosquitto/certs/broker.crt
keyfile /etc/mosquitto/certs/broker.key
require_certificate false
tls_version tlsv1.2

ACL (Erisim Kontrol Listesi)

# /etc/mosquitto/acl
user emre
topic readwrite ev/#
topic readwrite sensor/#

user readonly_kullanici
topic read ev/#

# mosquitto.conf'a ekle
acl_file /etc/mosquitto/acl

ESP32 TLS Baglantisi

#include <WiFiClientSecure.h>
#include <PubSubClient.h>

WiFiClientSecure espClient;
PubSubClient client(espClient);

void setup() {
    espClient.setCACert(ca_cert);  // Root CA sertifikasi
    client.setServer(MQTT_SERVER, 8883);
}

Guvenli MQTT altyapisi, ev otomasyonu sistemlerinin temeli icin sarttur.