cacert

docs/source/config.rst

@@ -447,11 +447,11 @@ SSL Listener - 8883
     ## Rate Limit. Format is 'burst,rate', Unit is KB/Sec
     ## mqtt.listener.ssl.rate_limit = 100,10
 
-    ## SSL Options
+    ## Configuring SSL Options
     mqtt.listener.ssl.handshake_timeout = 15
     mqtt.listener.ssl.keyfile = etc/certs/key.pem
     mqtt.listener.ssl.certfile = etc/certs/cert.pem
-    mqtt.listener.ssl.cacertfile = etc/certs/cacert.pem
+    ## mqtt.listener.ssl.cacertfile = etc/certs/cacert.pem
     ## mqtt.listener.ssl.verify = verify_peer
     ## mqtt.listener.ssl.fail_if_no_peer_cert = true
 
@@ -474,11 +474,10 @@ HTTPS/WSS Listener - 8084
     mqtt.listener.https = 8084
     mqtt.listener.https.acceptors = 4
     mqtt.listener.https.max_clients = 64
-    mqtt.listener.https.handshake_timeout = 10
+    mqtt.listener.https.handshake_timeout = 15
     mqtt.listener.https.certfile = etc/certs/cert.pem
     mqtt.listener.https.keyfile = etc/certs/key.pem
-    mqtt.listener.https.cacertfile = etc/certs/cacert.pem
-    ## 开启双向认证
+    ## mqtt.listener.https.cacertfile = etc/certs/cacert.pem
     ## mqtt.listener.https.verify = verify_peer
     ## mqtt.listener.https.fail_if_no_peer_cert = true