mqtt5/example/openssl-tls.cpp

#include <fmt/format.h>

#include <boost/asio/io_context.hpp>
#include <boost/asio/ip/tcp.hpp>
#include <boost/asio/ssl.hpp>
#include <boost/asio/co_spawn.hpp>
#include <boost/asio/use_awaitable.hpp>

#include <async_mqtt5.hpp>

namespace asio = boost::asio;

namespace async_mqtt5 {

template <typename StreamBase>
struct tls_handshake_type<asio::ssl::stream<StreamBase>> {
	static constexpr auto client = asio::ssl::stream_base::client;
	static constexpr auto server = asio::ssl::stream_base::server;
};

template <typename StreamBase>
void assign_tls_sni(
	const authority_path& ap,
	asio::ssl::context& ctx,
	asio::ssl::stream<StreamBase>& stream
) {
	SSL_set_tlsext_host_name(stream.native_handle(), ap.host.c_str());
}

} // end namespace async_mqtt5

constexpr char spacetime_ca[] = 
	"-----BEGIN CERTIFICATE-----\n"
	"MIIDYDCCAkigAwIBAgIUZZsEKT8m+uGZRNMaTuCiZBchSU4wDQYJKoZIhvcNAQEL\n"
	"BQAwHTEbMBkGA1UEAwwSTWlyZW8gU3BhY2VUaW1lIENBMB4XDTIzMDIwNzIwMzU1\n"
	"MFoXDTMzMDIwNDIwMzU1MFowHTEbMBkGA1UEAwwSTWlyZW8gU3BhY2VUaW1lIENB\n"
	"MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZshi2nJNyYZ4aJN+q27\n"
	"wA69lUAwRSHiJGBCGzppLue/LFDDC1t8GDicjYLGH5eJOlFwr8TbAr+ZH+/PyBoS\n"
	"7g5tsSn5xZhgEaivnq1MJNqYWHqW5KF2KhGxzzyC6m3JFK21H0xiJu9ej2wQs1tD\n"
	"ZWG3Y7pKeMFhCezEip5ueIyvmjsenK00TJKr6w1Rkr4BA40euLb5r0srWllKKUyl\n"
	"t5AEFghdVU7GeXfC2LPrzzMVngFWTaoL3QRf7VMhvNC0Xq7h2yjwd4wROYiJFZBj\n"
	"UgDSi2W50fPlVDliET2hPBR6lQPgCBRoIdQF8NneSBJ5xH+mw9ZZV8btL8ahwWtL\n"
	"GwIDAQABo4GXMIGUMB0GA1UdDgQWBBSM9pLZlAekgqt7ZXzPOdTEifMLmzBYBgNV\n"
	"HSMEUTBPgBSM9pLZlAekgqt7ZXzPOdTEifMLm6EhpB8wHTEbMBkGA1UEAwwSTWly\n"
	"ZW8gU3BhY2VUaW1lIENBghRlmwQpPyb64ZlE0xpO4KJkFyFJTjAMBgNVHRMEBTAD\n"
	"AQH/MAsGA1UdDwQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEAuSe6ZOwc8KnNXs1M\n"
	"KoShOUxZGDFBUJFNAtTSsMi0ap6GIo/yJr+6SAkHkVU0HFkl5lzRo9aUHRw4O7Ez\n"
	"579JMzUDdEGBxtYqda0Rxnw8N2mq5Fxpv+1b6v4GsWA30k6TdqnrFdNpFVI84W6u\n"
	"Fw3HTKA0Ah0jXryc1kC1jU7mYKf66TDI5PSbuZRjHgQzzyUXZmCn1WcLbvunsc4r\n"
	"Tk2FrfXHfvag12yPLc9aIOrtfRW2wtlZcxMzX4oE6wfllAIIsSZGx0muydiMe8bw\n"
	"Od5S0p1sspsWOthj1t9yhHMwznwV81QLePWzgGmml21uA067ZGG8NHxNbERd/9e+\n"
	"Qz9m6w==\n"
	"-----END CERTIFICATE-----\n"
;

void publish_qos0_openssl_tls() {
	using namespace async_mqtt5;
	asio::io_context ioc;

	using stream_type = asio::ssl::stream<asio::ip::tcp::socket>;
	asio::ssl::context tls_context(asio::ssl::context::tls_client);

	error_code ec;
	tls_context.add_certificate_authority(asio::buffer(spacetime_ca), ec);
	tls_context.set_verify_mode(asio::ssl::verify_peer);

	using client_type = mqtt_client<stream_type, decltype(tls_context)>;
	client_type c(ioc, "", std::move(tls_context));

	c.credentials("test-qos0-openssl-tls", "", "")
		.brokers("iot.fcluster.mireo.hr/mqtt", 8883)
		.will({ "test/mqtt-test", "i died", qos_e::at_least_once })
		.run();

	c.async_publish<qos_e::at_most_once>(
		"test/mqtt-test", "hello world with qos0!",
		retain_e::no, publish_props{},
		[&c](error_code ec) {
			fmt::print("[Test-publish-qos0-openssl-tls] error_code: {}\n", ec.message());
			c.cancel();
		}
	);

	ioc.run();
	return;
}

void publish_qos1_openssl_tls() {
	using namespace async_mqtt5;
	asio::io_context ioc;

	using stream_type = asio::ssl::stream<asio::ip::tcp::socket>;
	asio::ssl::context tls_context(asio::ssl::context::tls_client);

	error_code ec;
	tls_context.add_certificate_authority(asio::buffer(spacetime_ca), ec);
	tls_context.set_verify_mode(asio::ssl::verify_peer);

	using client_type = mqtt_client<stream_type, decltype(tls_context)>;
	client_type c(ioc, "", std::move(tls_context));

	c.credentials("test-qos1-openssl-tls", "", "")
		.brokers("iot.fcluster.mireo.hr/mqtt", 8883)
		.will({ "test/mqtt-test", "i died", qos_e::at_least_once })
		.run();

	c.async_publish<qos_e::at_least_once>(
		"test/mqtt-test", "hello world with qos1!",
		retain_e::no, publish_props{},
		[&c](error_code ec, reason_code rc, puback_props) {
			fmt::print(
				"[Test-publish-qos1-openssl-tls] "
				"error_code: {}, reason_code: {}\n", ec.message(), rc.message()
			);
			c.cancel();
		}
	);

	ioc.run();
	return;
}


void publish_qos2_openssl_tls() {
	using namespace async_mqtt5;
	asio::io_context ioc;

	using stream_type = asio::ssl::stream<asio::ip::tcp::socket>;
	asio::ssl::context tls_context(asio::ssl::context::tls_client);

	error_code ec;
	tls_context.add_certificate_authority(asio::buffer(spacetime_ca), ec);
	tls_context.set_verify_mode(asio::ssl::verify_peer);

	using client_type = mqtt_client<stream_type, decltype(tls_context)>;
	client_type c(ioc, "", std::move(tls_context));

	c.credentials("test-qos2-openssl-tls", "", "")
		.brokers("iot.fcluster.mireo.hr/mqtt", 8883)
		.will({ "test/mqtt-test", "i died", qos_e::at_least_once })
		.run();

	c.async_publish<qos_e::exactly_once>(
		"test/mqtt-test", "hello world with qos2!",
		retain_e::no, publish_props{},
		[&c](error_code ec, reason_code rc, pubcomp_props) {
			fmt::print(
				"[Test-publish-qos2-openssl-tls] "
				"error_code: {}, reason_code: {}\n", ec.message(), rc.message()
			);
			c.cancel();
		}
	);

	ioc.run();
	return;
}


void subscribe_and_receive_openssl_tls(int num_receive) {
	using namespace async_mqtt5;
	asio::io_context ioc;

	using stream_type = asio::ssl::stream<asio::ip::tcp::socket>;
	asio::ssl::context tls_context(asio::ssl::context::tls_client);

	error_code ec;
	tls_context.add_certificate_authority(asio::buffer(spacetime_ca), ec);
	tls_context.set_verify_mode(asio::ssl::verify_peer);

	using client_type = mqtt_client<stream_type, decltype(tls_context)>;
	client_type c(ioc, "", std::move(tls_context));

	c.credentials("test-subscriber-openssl-tls", "", "")
		.brokers("iot.fcluster.mireo.hr/mqtt", 8883)
		.will({ "test/mqtt-test", "i died", qos_e::at_least_once })
		.run();


	std::vector<subscribe_topic> topics;
	topics.push_back(subscribe_topic {
		"test/mqtt-test", {
			qos_e::exactly_once,
			subscribe_options::no_local_e::no,
			subscribe_options::retain_as_published_e::retain,
			subscribe_options::retain_handling_e::send
		}
	});

	c.async_subscribe(
		topics, subscribe_props {},
		[](error_code ec, std::vector<reason_code> codes, suback_props) {
			if (ec == asio::error::operation_aborted)
				return;
			fmt::print(
				"[Test-subscribe-and-receive-openssl-tls] subscribe error_code: {},"
				" reason_code: {}\n", ec.message(), codes[0].message()
			);
		}
	);


	for (auto i = 0; i < num_receive; i++) {
		c.async_receive(
			[&c, i, num_receive] (
				error_code ec, std::string topic,
				std::string payload, publish_props
			) {
				if (ec == asio::error::operation_aborted)
					return;
				fmt::print(
					"[Test-subscribe-and-receive-openssl-tls] message {}/{}:"
					"ec: {}, topic: {}, payload: {}\n",
					i + 1, num_receive, ec.message(), topic, payload
				);

				if (i == num_receive - 1)
					c.cancel();
			}
		);
	}

	ioc.run();
	return;
}

void test_coro() {
	using namespace async_mqtt5;
	asio::io_context ioc;

	co_spawn(ioc, [&ioc]() -> asio::awaitable<void> {
		using stream_type = asio::ssl::stream<asio::ip::tcp::socket>;
		asio::ssl::context tls_context(asio::ssl::context::tls_client);

		error_code ec;
		tls_context.add_certificate_authority(asio::buffer(spacetime_ca), ec);
		tls_context.set_verify_mode(asio::ssl::verify_peer);

		using client_type = mqtt_client<stream_type, decltype(tls_context)>;
		client_type c(ioc, "", std::move(tls_context));

		c.credentials("coro-client", "", "")
			.brokers("iot.fcluster.mireo.hr/mqtt", 8883)
			.will({ "test/mqtt-test", "i died", qos_e::at_least_once })
			.run();

		std::vector<subscribe_topic> topics;
		topics.push_back(subscribe_topic {
			"test/mqtt-test", {
				qos_e::exactly_once,
				subscribe_options::no_local_e::no,
				subscribe_options::retain_as_published_e::retain,
				subscribe_options::retain_handling_e::send
			}
		});

		auto [codes, props] = co_await c.async_subscribe(
			topics, subscribe_props {}, asio::use_awaitable
		);
		fmt::print("Subscribe result: ({}),", codes[0].message());

		auto [topic, payload, rec_props] = co_await c.async_receive(asio::use_awaitable);
		fmt::print("Receive from topic {}: {}\n", topic, payload);

		asio::steady_timer timer(ioc);
		timer.expires_from_now(std::chrono::seconds(1));
		co_await timer.async_wait(asio::use_awaitable);
		c.cancel();

		co_return;
	}, asio::detached);

	ioc.run();
}

void run_openssl_tls_examples() {
	publish_qos0_openssl_tls();
	publish_qos1_openssl_tls();
	publish_qos2_openssl_tls();
	subscribe_and_receive_openssl_tls(1);
	test_coro();
}