Question

尝试使用AWS IoT，我有以下代码在昨天工作：

import paho.mqtt.client as mqtt
import ssl, random
from time import sleep

mqtt_url = "XXXXXXXX.iot.us-east-2.amazonaws.com"
root_ca = './certs/iotRootCA.pem'
public_crt = './certs/deviceCert.crt'
private_key = './certs/deviceCert.key'

connflag = False

def on_connect(client, userdata, flags, response_code):
    global connflag
    connflag = True
    print("Connected with status: {0}".format(response_code))

def on_publish(client, userdata, mid):
    print userdata + " -- " + mid
    #client.disconnect()

if __name__ == "__main__":
    print "Loaded MQTT configuration information."
    print "Endpoint URL: " + mqtt_url
    print "Root Cert: " + root_ca
    print "Device Cert: " + public_crt
    print "Private Key: " + private_key

    client = mqtt.Client()
    client.tls_set(root_ca,
                   certfile = public_crt,
                   keyfile = private_key,
                   cert_reqs = ssl.CERT_REQUIRED,
                   tls_version = ssl.PROTOCOL_TLSv1_2,
                   ciphers = None)

    client.on_connect = on_connect
#    client.on_publish = on_publish

    print "Connecting to AWS IoT Broker..."
    client.connect(mqtt_url, port = 8883, keepalive=60)
    client.loop_start()
#    client.loop_forever()

    while 1==1:
        sleep(0.5)
        print connflag
        if connflag == True:
            print "Publishing..."
            ap_measurement = random.uniform(25.0, 150.0)
            client.publish("ActivePower", ap_measurement, qos=1)
            print("ActivePower published: " + "%.2f" % ap_measurement )
        else:
            print "waiting for connection..."

正如我所说，昨天这段代码正在运作。今天，我得到以下（没有联系）：

python awsiot-publish.py
  加载的MQTT配置信息   端点URL：XXXXXXX.iot.us-east-2.amazonaws.com
  根证书：./certs/iotRootCA.pem
  设备证书：./certs/deviceCert.crt
  私钥：./certs/deviceCert.key
  连接到AWS IoT Broker ...   假
  等待连接...
  假
  等待连接...
  假
  等待连接......   假

我不知道AWS IoT是否存在问题...我认为文档存在缺陷：我们不清楚如何使用我们的代码......

Answer 1

我认为您的问题是您的证书的策略没有适当的连接权限。如果没有指定，paho会生成一个随机的client_id。您应该设置client_id。您还需要一个允许证书使用该客户端ID进行连接的策略。

git log --author=person@company.com

将client_id设置为与您的thingname相同可能很有用。（但这不是必需的。）您还可以将策略中的资源设置为{ "Effect": "Allow", "Action": "iot:Connect", "Resource":"arn:aws:iot:us-east1:123456789012:client/yourClientIdGoesHere" }，然后连接到任何client_id：

AWS IoT - 使用paho-mqtt无法正常工作的连接和发布操作

1 个答案: