search

openshwprojects / OpenBK7231T_App

Open source firmware (Tasmota/Esphome replacement) for BK7231T, BK7231N, BL2028N, T34, XR809, W800/W801, W600/W601, BL602 and LN882H
https://openbekeniot.github.io/webapp/devicesList.html
1.49k stars 279 forks source link

Is it able to support mqtt connection via TLS (secure connection) on remote MQTT server such as AWS broker ? #668

Open dinhchinh82 opened 1 year ago

dinhchinh82 commented 1 year ago

First of all, thank you guys so much for supporting many new beken devices. I've tried to flash some new Tuya wifi devices and they work well with Home Assistant.

By the way, is it able to connect the Beken device direct to the remote MQTT server over TLS (secured connection) such as AWS MQTT broker ?

That would be good solution to make the wifi device can work independently without Home Assistant.

valeklubomir commented 1 year ago

Secure MQTT is supported by LWIP, but requirres a lot of RAM. I think it is worth to test it. EDIT: Changes would requirre:

openshwprojects commented 1 year ago

It should be possible to enable it and do multiple builds per platform, for example one with secure connection enabled and one without it. It will be necessary over time as features grow and grow and the amount of flash memory we have is finite.

valekCN commented 1 year ago

I will check LWIP if TLS is not already compiled. Normally during creating conenction to MQTT type is selected plain/secure and certificate must be loaded into RAM for TLS. From using MQTT SSL/TLS in ESP32 where LWIP is also used, I know that it requirres a lot of RAM. I think RAM shortage will be more in an issue than FLASH shortage.

EDIT: This will again re-surface problems with dynamic allocation, because if secure connection would have higher priority we would need to upgrade many static memory data to dynamic memory. So unused functions will not consume RAM.

dinhchinh82 commented 1 year ago

Secure MQTT is supported by LWIP, but requirres a lot of RAM. I think it is worth to test it. EDIT: Changes would requirre:

  • add configration for using secure connection
  • confugration to store/change certificate

could you please check the whether orginal Tuya firmware which might be already supported MQTT over TLS? we hope to have testing version soon in near future.

Thank you so much.