etactica / mqtt-malaria

Attacking MQTT systems with Mosquittos (scalability and load testing utilities for MQTT environments)
BSD 2-Clause "Simplified" License
267 stars 57 forks source link

TLS certificate support #29

Open swails opened 8 years ago

swails commented 8 years ago

Hi,

I wasn't completely sure that this project was still active, but recent activity on #28 suggests that's not necessarily true. I'm working on SSL/TLS support in my own fork (with support for anonymous encryption with self-signed certs). Would that be a welcome addition as a PR here? I believe encryption adds a bit of overhead to the bandwidth consumption, so I wanted the stress testing done with that turned on (since it will be in production for my needs).

I'm not tackling client certs since that's not part of my use-case, but it should presumably be straightforward to make the addition if someone wanted it.

Thanks.

karlp commented 8 years ago

I'm not actively using it myself anymore/rightnow, but I'll do my best to merge things. There's already support for TLS-PSK, but I hadn't needed cert based stuff, I'm sure someone would find it useful :) In general, SSL is virtually zero overhead until your packet sizes get "large" as the main cost is only at connection time.

vasifsy commented 7 years ago

+1 for @swails 's suggestion. I am personally working on TLS and self-signed --cafile based mosquitto server. So, I feel that would be a great addition to test my service.

karlp commented 7 years ago

Please see my earlier comment. I'm sure it would be a useful addition, and I' try and merge any PR that adds this. However, I'm not working on it myself.

abhi-84 commented 3 years ago

Hi there Is SSL/TLS support available now? How to access and use it? Thanks

karlp commented 3 years ago

Please read the earlier comments.

abhi-84 commented 3 years ago

As per the previous comments, it does not talk about how to use this tool with TLS. Can you please carify

karlp commented 3 years ago

As mentioned, every time, https://github.com/etactica/mqtt-malaria/issues/29#issuecomment-214262882 there is no support for certificate based authentication. A Pull request would be reviewed. TLS-PSK is supported. I've locked this because, as before, I'm not working on this, and saying the same thing every time is tedious.