Add labs
This commit is contained in:
33
03-security/lab04/lab.txt
Normal file
33
03-security/lab04/lab.txt
Normal file
@ -0,0 +1,33 @@
|
||||
= Verwendung MQTT mit TLS
|
||||
|
||||
Verwenden Sie `mosquitto_sub` mit dem Host `test.mosquitto.org` und `--tls-use-os-certs`,
|
||||
verwenden Sie einmal Port `8886` und einmal Port `8883`.
|
||||
|
||||
$ docker run --rm -it --init --net host eclipse-mosquitto \
|
||||
mosquitto_sub --host test.mosquitto.org --port 8886 -V 5 -W 10 --topic "#" --tls-use-os-certs --debug
|
||||
|
||||
$ docker run --rm -it --init --net host eclipse-mosquitto \
|
||||
mosquitto_sub --host test.mosquitto.org --port 8883 -V 5 -W 10 --topic "#" --tls-use-os-certs --debug
|
||||
|
||||
|
||||
Laden Sie das CA Zertifikat von https://test.mosquitto.org/ssl/mosquitto.org.crt
|
||||
und verwenden Sie es mit `--cafile` statt `--tls-use-os-certs` auf Port 8883
|
||||
|
||||
$ wget https://test.mosquitto.org/ssl/mosquitto.org.crt
|
||||
|
||||
$ docker run --rm -it --init --net host -v $PWD:/data eclipse-mosquitto \
|
||||
mosquitto_sub --host test.mosquitto.org --port 8883 -V 5 -W 10 --topic "#" \
|
||||
--cafile /data/mosquitto.org.crt --debug
|
||||
|
||||
|
||||
|
||||
Was passiert, wenn Sie statt des Hostnamens die aufgelöste IP verwenden?
|
||||
|
||||
$ host test.mosquitto.org
|
||||
$ dig in a test.mosquitto.org
|
||||
$ nslookup test.mosquitto.org
|
||||
|
||||
|
||||
$ docker run --rm -it --init --net host -v $PWD:/data eclipse-mosquitto \
|
||||
mosquitto_sub --host 54.36.178.49 --port 8883 -V 5 -W 10 --topic "#" \
|
||||
--cafile /data/mosquitto.org.crt --debug
|
||||
Reference in New Issue
Block a user