<div id="readability-page-1" class="page"><div>
                <div id="SE-10354b3b-d230-4149-945b-778991a22c17">
                                <p><a href="#" onclick="return false;" data-linktype="img" data-linkdata="{&quot;id&quot; : &quot;SE-10354b3b-d230-4149-945b-778991a22c17&quot;, &quot;src&quot; : &quot;https://mblogthumb-phinf.pstatic.net/MjAyMzEyMzBfMjY1/MDAxNzAzOTMyODUyNTk0.WqAtLIj-n5SoPlgbIPZy7Hd5vAosQaPTI1tXVU-MiAsg.fFXOEnXNJlniN6sNWskugmoQB17tTGVjS03QX9r4hg0g.JPEG.nanotoly/image.jpg&quot;, &quot;originalWidth&quot; : &quot;760&quot;, &quot;originalHeight&quot; : &quot;323&quot;, &quot;linkUse&quot; : &quot;false&quot;, &quot;link&quot; : &quot;&quot;}">
                                        <img src="https://mblogthumb-phinf.pstatic.net/MjAyMzEyMzBfMjY1/MDAxNzAzOTMyODUyNTk0.WqAtLIj-n5SoPlgbIPZy7Hd5vAosQaPTI1tXVU-MiAsg.fFXOEnXNJlniN6sNWskugmoQB17tTGVjS03QX9r4hg0g.JPEG.nanotoly/image.jpg?type=w800" data-width="760" data-height="323" alt="">
                                    </a>
                                </p>
                        </div>
                                <div id="SE-00877e54-66dd-40c5-858b-0fb22181d99c">
                                <a href="https://github.com/espressif/esp-aws-iot/tree/master/examples/mqtt/tls_mutual_auth" target="_blank">
                                    <div>
                                        
                                        <p>{"payload":{"allShortcutsEnabled":false,"path":"examples/mqtt/tls_mutual_auth","repo":{"id":177583670,"defaultBranch":"master","name":"esp-aws-iot","ownerLogin":"espressif","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2019-03-25T12:38:24.000Z","ownerAvatar":"https://avatars...</p>
                                        <p>github.com</p>
                                    </div>
                                </a>
                            </div>                <div id="SE-20dfbd8d-316c-4ddf-a453-32b745d856cd">
                                    <p id="SE-3c9c94d1-e42f-42f3-8fad-7e38b921c9a1"><span id="SE-09ef5401-dde5-451e-9812-8718a04942ac">​</span></p><p id="SE-cbc15402-902e-4613-80d9-71b7cd44fe57"><span id="SE-f33ec717-a462-438a-9c1f-373c402b2eb0">이 때 저는 서버에서 인증서를 불러와, 변수에 인증서를 저장하고.</span></p><p id="SE-b3d0380b-b980-409f-94aa-839ac49d79bb"><span id="SE-7af4e154-8c06-412a-ba53-7f4cbe28736b">변수에 있는 인증서로 MQTT에 접속하고 싶었습니다. </span></p><p id="SE-1ebc797a-3efd-4b6d-a166-67f6bdf98bcb"><span id="SE-ae281091-7832-44ee-9764-0a660e1415a9">​</span></p><p id="SE-343fef45-6037-40b4-b816-4719cba49697"><span id="SE-4fe41aff-835d-402c-a4c6-0525d0112f0f">이를 위해 </span><span id="SE-6ce5b5eb-4482-42e0-bb03-e9ab5e4f0501"><i>connectToServerWithBackoffRetries()</i></span><span id="SE-74625376-5120-43cc-9996-4dea3d6379d5">를 수정하면 됩니다. </span></p><p id="SE-3b11b792-ac29-4261-b1e5-8af0867c2889"><span id="SE-60de9fe8-f9e2-4fd1-bbe4-a2faeb75247a">우선 AWS IOT cert를 변수에 넣어줍니다.</span></p>
                            </div>                <div id="SE-e581ced5-f9e2-4190-9853-9b6a06a4d410">
                                    <p>char* rootCA = R"(-----BEGIN CERTIFICATE-----
MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF
...
rqXRfboQnoZsG4q5WTP468SQvvG5
-----END CERTIFICATE-----)";

char* clientKey = R"(-----BEGIN CERTIFICATE-----
MIIDWjCCAkKgAwIBAgIVALEV5l3wiyAvYYIBLc6gXDE4YyhfMA0GCSqGSIb3DQEB
...
zJEwcrBXmMlioyedCB/beanxnn6A6cli4dedIHBNOry79WQ5QdisQjyZrkviIg==
-----END CERTIFICATE-----)";

char* privateKey = R"(-----BEGIN RSA PRIVATE KEY-----
MIIEpAIBAAKCAQEAviah4Zpv/yi0mv67dFW6FUWoIsxLFoBVNjRLLDoGmU+OCCT1
...
M/H9cIsfaFbcTbAXHq6lVDh+ERr1v+WGctLpX4LMVsbWIpoTyfuSQg==
-----END RSA PRIVATE KEY-----)";</p>
                                </div>                <div id="SE-c1eef865-8819-40fb-8c01-5f99ff5c01ef">
                                    <p id="SE-a5dad5ec-654c-481d-8d09-264ba05c49fe"><span id="SE-805e6c98-14d3-4e79-8b93-b945b853ea00">​</span></p><p id="SE-c490ffc4-9719-4f15-bc7a-5ab5f9d8fcc6"><span id="SE-87a3999f-6500-47ea-9e4c-6212e231941d">함수 내에서 rootCA는 아래의 기존 코드에서</span></p>
                            </div>                <div id="SE-bbfc1d47-181d-456e-bb70-046b955d7e8a">
                                    <p>/* Initialize credentials for establishing TLS session. */
pNetworkContext-&gt;pcServerRootCA = root_cert_auth_start;
pNetworkContext-&gt;pcServerRootCASize = root_cert_auth_end - root_cert_auth_start;</p>
                                </div>                                <div id="SE-c94250a6-ee92-4b1a-ad7e-c289c7567a6e">
                                    <p>/* Initialize credentials for establishing TLS session. */
pNetworkContext-&gt;pcServerRootCA = rootCA;
pNetworkContext-&gt;pcServerRootCASize = (int)strlen(rootCA) + 1;</p>
                                </div>                <div id="SE-75e5cc7d-e880-440d-858b-bfba5ad6eae5">
                                    <p id="SE-fd9f2498-2b89-4e1d-ae15-dde887e69dd7"><span id="SE-f3537053-567a-4156-b388-14ed93da4a8b">​</span></p><p id="SE-d01a8acf-0709-468f-bf8e-0c0dcfbf80ed"><span id="SE-5d8cab37-5425-4ddf-a05b-e98b4e0890a9">​</span></p><p id="SE-d3a1826a-3605-4bdf-901a-6c7f396c960a"><span id="SE-4f8a5746-5f4d-4006-825c-da7bbba87e48">client cert와 client key는 아래 기존 코드에서</span></p>
                            </div>                <div id="SE-76311733-52b6-4969-9fbd-6d0b2af13bda">
                                    <p>pNetworkContext-&gt;pcClientCert = client_cert_start;
pNetworkContext-&gt;pcClientCertSize = client_cert_end - client_cert_start;
pNetworkContext-&gt;pcClientKey = client_key_start;
pNetworkContext-&gt;pcClientKeySize = client_key_end - client_key_start;</p>
                                </div>                                <div id="SE-bc5c40ec-ab62-40fe-8f35-accb5241a742">
                                    <p>pNetworkContext-&gt;pcClientCert = clientKey;
pNetworkContext-&gt;pcClientCertSize = (int)strlen(clientKey) + 1;
pNetworkContext-&gt;pcClientKey = privateKey;
pNetworkContext-&gt;pcClientKeySize = (int)strlen(privateKey)+ 1;</p>
                                </div>                                <div id="SE-59f3d6c4-18a1-4d91-a76e-ff0f46d88ae6">
                                <p><a href="#" onclick="return false;" data-linktype="img" data-linkdata="{&quot;id&quot; : &quot;SE-59f3d6c4-18a1-4d91-a76e-ff0f46d88ae6&quot;, &quot;src&quot; : &quot;https://mblogthumb-phinf.pstatic.net/MjAyMzEyMzBfMjA3/MDAxNzAzOTMyNjMxNjkz.vbvXWD6B32Czn-riaCDtHlo_DFiNZnf1pQV_kf8fk_kg.u3ZPb8M7-byNAvjoU0LZ44uhC-QL-ndBRcpbEH3p9Zog.PNG.nanotoly/image.png&quot;, &quot;originalWidth&quot; : &quot;719&quot;, &quot;originalHeight&quot; : &quot;385&quot;, &quot;linkUse&quot; : &quot;false&quot;, &quot;link&quot; : &quot;&quot;}">
                                        <img src="https://mblogthumb-phinf.pstatic.net/MjAyMzEyMzBfMjA3/MDAxNzAzOTMyNjMxNjkz.vbvXWD6B32Czn-riaCDtHlo_DFiNZnf1pQV_kf8fk_kg.u3ZPb8M7-byNAvjoU0LZ44uhC-QL-ndBRcpbEH3p9Zog.PNG.nanotoly/image.png?type=w800" data-width="719" data-height="385" alt="">
                                    </a>
                                </p>
                        </div>
                    </div></div>

nanotoly's blog

아래 예제에서는 파일에 cert를 넣고, 이를 코드에서 불러와 MQTT에 접속하는 방식입니다. https://github.com/espressif/esp-aws-iot/tree/master/examples/mqtt/tls_mutual_auth 이 때 저는 서버에서 인증서를 불러와, 변수에 인증서를 저장하고. 변수에 있는 인증서로 MQTT에 접속하고 싶었습니다. 이를 위해 connectToServerWithBackoffRetries()를 수정하면 됩니다. 우선 AWS IOT cert를 변수에 넣어줍니다. 함수 내에서 rootCA는 아래의 기존 코드에서 아래처럼 바꿔야 합니다. client cert와 client key는 아래 기존 코드에서 아래 처럼 바꿔야합니다. 이렇게 수정 한 후, 펌웨어를 동작시켜보면 잘 동작하는 것을 확인할 수 있습니다.

[ESP-IDF] 변수에 AWS IOT cert를 넣어서 MQTT 접속하는 방법

댓글