Unable to connect to aws-iot using paho-mqtt java client code

up vote
1
down vote

favorite

1

I created thing on AWS core. Then downloaded cert, private key and rootCa certificate too. My main goal is to publish and subscribe to AWS shadow so that I can automate my home lighting system.
I tried to connect to aws iot using paho mqtt java client code, using following code.

    package test.pub;



    import java.io.BufferedInputStream;

    import java.io.FileInputStream;

    import java.io.FileReader;

    import java.security.KeyPair;

    import java.security.KeyStore;

    import java.security.Security;

    import java.security.cert.CertificateFactory;

    import java.security.cert.X509Certificate;



    import javax.net.ssl.KeyManagerFactory;

    import javax.net.ssl.SSLContext;

    import javax.net.ssl.SSLSocketFactory;

    import javax.net.ssl.TrustManagerFactory;



    import org.bouncycastle.jce.provider.BouncyCastleProvider;

    import org.bouncycastle.openssl.PEMDecryptorProvider;

    import org.bouncycastle.openssl.PEMEncryptedKeyPair;

    import org.bouncycastle.openssl.PEMKeyPair;

    import org.bouncycastle.openssl.PEMParser;

    import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter;

    import org.bouncycastle.openssl.jcajce.JcePEMDecryptorProviderBuilder;

    import org.eclipse.paho.client.mqttv3.MqttClient;

    import org.eclipse.paho.client.mqttv3.MqttConnectOptions;

    import org.eclipse.paho.client.mqttv3.MqttException;



    public class App {



        public static void main(String args) {



            String serverUrl = "ssl://xxxxxxxx.iot.us-east- 

       1.amazonaws.com:8883";

            String caFilePath = "ca1.pem";

            String clientCrtFilePath = "thing.cert.pem";

            String clientKeyFilePath = "thing.private.key";



        MqttClient client;

        try {

            client = new MqttClient(serverUrl, MqttClient.generateClientId());

            MqttConnectOptions options = new MqttConnectOptions();



            options.setConnectionTimeout(60);

            options.setKeepAliveInterval(60);

            options.setMqttVersion(MqttConnectOptions.MQTT_VERSION_3_1);





            SSLSocketFactory socketFactory = getSocketFactory(caFilePath,

                    clientCrtFilePath, clientKeyFilePath, "");

            options.setSocketFactory(socketFactory);



            System.out.println("starting connect the server...");

            client.connect(options);

            System.out.println("connected!");

            Thread.sleep(1000);



            client.subscribe(

                    "test",

                    0);

            client.disconnect();

            System.out.println("disconnected!");





        } catch (MqttException e) {

            e.printStackTrace();

        } catch (Exception e) {

            e.printStackTrace();

        }



    }



    private static SSLSocketFactory getSocketFactory(final String caCrtFile,

            final String crtFile, final String keyFile, final String password)

            throws Exception {

        Security.addProvider(new BouncyCastleProvider());



        // load CA certificate

        X509Certificate caCert = null;



        FileInputStream fis = new FileInputStream(caCrtFile);

        BufferedInputStream bis = new BufferedInputStream(fis);

        CertificateFactory cf = CertificateFactory.getInstance("X.509");



        while (bis.available() > 0) {

            caCert = (X509Certificate) cf.generateCertificate(bis);

            // System.out.println(caCert.toString());

        }



        // load client certificate

        bis = new BufferedInputStream(new FileInputStream(crtFile));

        X509Certificate cert = null;

        while (bis.available() > 0) {

            cert = (X509Certificate) cf.generateCertificate(bis);

            // System.out.println(caCert.toString());

        }



        // load client private key

        PEMParser pemParser = new PEMParser(new FileReader(keyFile));

        Object object = pemParser.readObject();

        PEMDecryptorProvider decProv = new JcePEMDecryptorProviderBuilder()

                .build(password.toCharArray());

        JcaPEMKeyConverter converter = new JcaPEMKeyConverter()

                .setProvider("BC");

        KeyPair key;

        if (object instanceof PEMEncryptedKeyPair) {

            System.out.println("Encrypted key - we will use provided password");

            key = converter.getKeyPair(((PEMEncryptedKeyPair) object)

                    .decryptKeyPair(decProv));

        } else {

            System.out.println("Unencrypted key - no password needed");

            key = converter.getKeyPair((PEMKeyPair) object);

        }

        pemParser.close();



        // CA certificate is used to authenticate server

        KeyStore caKs = KeyStore.getInstance(KeyStore.getDefaultType());

        caKs.load(null, null);

        caKs.setCertificateEntry("ca-certificate", caCert);

        TrustManagerFactory tmf = TrustManagerFactory.getInstance("X509");

        tmf.init(caKs);



        // client key and certificates are sent to server so it can authenticate

        // us

        KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());

        ks.load(null, null);

        ks.setCertificateEntry("certificate", cert);

        ks.setKeyEntry("private-key", key.getPrivate(), password.toCharArray(),

                new java.security.cert.Certificate { cert });

        KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory

                .getDefaultAlgorithm());

        kmf.init(ks, password.toCharArray());



        // finally, create SSL socket factory

        SSLContext context = SSLContext.getInstance("TLSv1.2");

        context.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);



        return context.getSocketFactory();

    }



}

I am getting following console log and error

Unencrypted key - no password needed

starting connect the server...

Unable to connect to server (32103) - java.net.ConnectException: Connection timed out: connect

    at org.eclipse.paho.client.mqttv3.internal.TCPNetworkModule.start(TCPNetworkModule.java:79)

    at org.eclipse.paho.client.mqttv3.internal.SSLNetworkModule.start(SSLNetworkModule.java:82)

    at org.eclipse.paho.client.mqttv3.internal.ClientComms$ConnectBG.run(ClientComms.java:590)

    at java.lang.Thread.run(Unknown Source)

Caused by: java.net.ConnectException: Connection timed out: connect

    at java.net.DualStackPlainSocketImpl.waitForConnect(Native Method)

    at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)

    at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)

    at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)

    at java.net.AbstractPlainSocketImpl.connect(Unknown Source)

    at java.net.PlainSocketImpl.connect(Unknown Source)

    at java.net.SocksSocketImpl.connect(Unknown Source)

    at java.net.Socket.connect(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.connect(Unknown Source)

    at org.eclipse.paho.client.mqttv3.internal.TCPNetworkModule.start(TCPNetworkModule.java:70)

    ... 3 more

please help me to connect to aws IOT so that i can update shadow or atleast pub/sub to topics.

mqtt publish-subscribe tls1.2 paho aws-iot

share|improve this question

asked 2 days ago

subodh007

1186

New contributor

subodh007 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  Double check you have the right host name for the broker you are trying to connect to. A time out error implies that there is nothing listening where you think it is. That or possibly a firewall somewhere is dropping packets.
  – hardillb
  2 days ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  @hardillb I am using aws endpoint :- xxxxxxxx.iot.us-east- 1.amazonaws.com to connect to aws iot thing. here xxxxxxxx is prefix.
  – subodh007
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  yes, I understand you've changed it to post here, but check the real value.
  – hardillb
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  @hardillb I checked all details but no success yet
  – subodh007
  2 hours ago
  
  
  

  
  
  
  

add a comment | 

up vote
1
down vote

favorite

1

I created thing on AWS core. Then downloaded cert, private key and rootCa certificate too. My main goal is to publish and subscribe to AWS shadow so that I can automate my home lighting system.
I tried to connect to aws iot using paho mqtt java client code, using following code.

    package test.pub;



    import java.io.BufferedInputStream;

    import java.io.FileInputStream;

    import java.io.FileReader;

    import java.security.KeyPair;

    import java.security.KeyStore;

    import java.security.Security;

    import java.security.cert.CertificateFactory;

    import java.security.cert.X509Certificate;



    import javax.net.ssl.KeyManagerFactory;

    import javax.net.ssl.SSLContext;

    import javax.net.ssl.SSLSocketFactory;

    import javax.net.ssl.TrustManagerFactory;



    import org.bouncycastle.jce.provider.BouncyCastleProvider;

    import org.bouncycastle.openssl.PEMDecryptorProvider;

    import org.bouncycastle.openssl.PEMEncryptedKeyPair;

    import org.bouncycastle.openssl.PEMKeyPair;

    import org.bouncycastle.openssl.PEMParser;

    import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter;

    import org.bouncycastle.openssl.jcajce.JcePEMDecryptorProviderBuilder;

    import org.eclipse.paho.client.mqttv3.MqttClient;

    import org.eclipse.paho.client.mqttv3.MqttConnectOptions;

    import org.eclipse.paho.client.mqttv3.MqttException;



    public class App {



        public static void main(String args) {



            String serverUrl = "ssl://xxxxxxxx.iot.us-east- 

       1.amazonaws.com:8883";

            String caFilePath = "ca1.pem";

            String clientCrtFilePath = "thing.cert.pem";

            String clientKeyFilePath = "thing.private.key";



        MqttClient client;

        try {

            client = new MqttClient(serverUrl, MqttClient.generateClientId());

            MqttConnectOptions options = new MqttConnectOptions();



            options.setConnectionTimeout(60);

            options.setKeepAliveInterval(60);

            options.setMqttVersion(MqttConnectOptions.MQTT_VERSION_3_1);





            SSLSocketFactory socketFactory = getSocketFactory(caFilePath,

                    clientCrtFilePath, clientKeyFilePath, "");

            options.setSocketFactory(socketFactory);



            System.out.println("starting connect the server...");

            client.connect(options);

            System.out.println("connected!");

            Thread.sleep(1000);



            client.subscribe(

                    "test",

                    0);

            client.disconnect();

            System.out.println("disconnected!");





        } catch (MqttException e) {

            e.printStackTrace();

        } catch (Exception e) {

            e.printStackTrace();

        }



    }



    private static SSLSocketFactory getSocketFactory(final String caCrtFile,

            final String crtFile, final String keyFile, final String password)

            throws Exception {

        Security.addProvider(new BouncyCastleProvider());



        // load CA certificate

        X509Certificate caCert = null;



        FileInputStream fis = new FileInputStream(caCrtFile);

        BufferedInputStream bis = new BufferedInputStream(fis);

        CertificateFactory cf = CertificateFactory.getInstance("X.509");



        while (bis.available() > 0) {

            caCert = (X509Certificate) cf.generateCertificate(bis);

            // System.out.println(caCert.toString());

        }



        // load client certificate

        bis = new BufferedInputStream(new FileInputStream(crtFile));

        X509Certificate cert = null;

        while (bis.available() > 0) {

            cert = (X509Certificate) cf.generateCertificate(bis);

            // System.out.println(caCert.toString());

        }



        // load client private key

        PEMParser pemParser = new PEMParser(new FileReader(keyFile));

        Object object = pemParser.readObject();

        PEMDecryptorProvider decProv = new JcePEMDecryptorProviderBuilder()

                .build(password.toCharArray());

        JcaPEMKeyConverter converter = new JcaPEMKeyConverter()

                .setProvider("BC");

        KeyPair key;

        if (object instanceof PEMEncryptedKeyPair) {

            System.out.println("Encrypted key - we will use provided password");

            key = converter.getKeyPair(((PEMEncryptedKeyPair) object)

                    .decryptKeyPair(decProv));

        } else {

            System.out.println("Unencrypted key - no password needed");

            key = converter.getKeyPair((PEMKeyPair) object);

        }

        pemParser.close();



        // CA certificate is used to authenticate server

        KeyStore caKs = KeyStore.getInstance(KeyStore.getDefaultType());

        caKs.load(null, null);

        caKs.setCertificateEntry("ca-certificate", caCert);

        TrustManagerFactory tmf = TrustManagerFactory.getInstance("X509");

        tmf.init(caKs);



        // client key and certificates are sent to server so it can authenticate

        // us

        KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());

        ks.load(null, null);

        ks.setCertificateEntry("certificate", cert);

        ks.setKeyEntry("private-key", key.getPrivate(), password.toCharArray(),

                new java.security.cert.Certificate { cert });

        KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory

                .getDefaultAlgorithm());

        kmf.init(ks, password.toCharArray());



        // finally, create SSL socket factory

        SSLContext context = SSLContext.getInstance("TLSv1.2");

        context.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);



        return context.getSocketFactory();

    }



}

I am getting following console log and error

Unencrypted key - no password needed

starting connect the server...

Unable to connect to server (32103) - java.net.ConnectException: Connection timed out: connect

    at org.eclipse.paho.client.mqttv3.internal.TCPNetworkModule.start(TCPNetworkModule.java:79)

    at org.eclipse.paho.client.mqttv3.internal.SSLNetworkModule.start(SSLNetworkModule.java:82)

    at org.eclipse.paho.client.mqttv3.internal.ClientComms$ConnectBG.run(ClientComms.java:590)

    at java.lang.Thread.run(Unknown Source)

Caused by: java.net.ConnectException: Connection timed out: connect

    at java.net.DualStackPlainSocketImpl.waitForConnect(Native Method)

    at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)

    at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)

    at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)

    at java.net.AbstractPlainSocketImpl.connect(Unknown Source)

    at java.net.PlainSocketImpl.connect(Unknown Source)

    at java.net.SocksSocketImpl.connect(Unknown Source)

    at java.net.Socket.connect(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.connect(Unknown Source)

    at org.eclipse.paho.client.mqttv3.internal.TCPNetworkModule.start(TCPNetworkModule.java:70)

    ... 3 more

please help me to connect to aws IOT so that i can update shadow or atleast pub/sub to topics.

mqtt publish-subscribe tls1.2 paho aws-iot

share|improve this question

asked 2 days ago

subodh007

1186

New contributor

subodh007 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  Double check you have the right host name for the broker you are trying to connect to. A time out error implies that there is nothing listening where you think it is. That or possibly a firewall somewhere is dropping packets.
  – hardillb
  2 days ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  @hardillb I am using aws endpoint :- xxxxxxxx.iot.us-east- 1.amazonaws.com to connect to aws iot thing. here xxxxxxxx is prefix.
  – subodh007
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  yes, I understand you've changed it to post here, but check the real value.
  – hardillb
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  @hardillb I checked all details but no success yet
  – subodh007
  2 hours ago
  
  
  

  
  
  
  

add a comment | 

up vote
1
down vote

favorite

1

up vote
1
down vote

favorite

1

1

I created thing on AWS core. Then downloaded cert, private key and rootCa certificate too. My main goal is to publish and subscribe to AWS shadow so that I can automate my home lighting system.
I tried to connect to aws iot using paho mqtt java client code, using following code.

    package test.pub;



    import java.io.BufferedInputStream;

    import java.io.FileInputStream;

    import java.io.FileReader;

    import java.security.KeyPair;

    import java.security.KeyStore;

    import java.security.Security;

    import java.security.cert.CertificateFactory;

    import java.security.cert.X509Certificate;



    import javax.net.ssl.KeyManagerFactory;

    import javax.net.ssl.SSLContext;

    import javax.net.ssl.SSLSocketFactory;

    import javax.net.ssl.TrustManagerFactory;



    import org.bouncycastle.jce.provider.BouncyCastleProvider;

    import org.bouncycastle.openssl.PEMDecryptorProvider;

    import org.bouncycastle.openssl.PEMEncryptedKeyPair;

    import org.bouncycastle.openssl.PEMKeyPair;

    import org.bouncycastle.openssl.PEMParser;

    import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter;

    import org.bouncycastle.openssl.jcajce.JcePEMDecryptorProviderBuilder;

    import org.eclipse.paho.client.mqttv3.MqttClient;

    import org.eclipse.paho.client.mqttv3.MqttConnectOptions;

    import org.eclipse.paho.client.mqttv3.MqttException;



    public class App {



        public static void main(String args) {



            String serverUrl = "ssl://xxxxxxxx.iot.us-east- 

       1.amazonaws.com:8883";

            String caFilePath = "ca1.pem";

            String clientCrtFilePath = "thing.cert.pem";

            String clientKeyFilePath = "thing.private.key";



        MqttClient client;

        try {

            client = new MqttClient(serverUrl, MqttClient.generateClientId());

            MqttConnectOptions options = new MqttConnectOptions();



            options.setConnectionTimeout(60);

            options.setKeepAliveInterval(60);

            options.setMqttVersion(MqttConnectOptions.MQTT_VERSION_3_1);





            SSLSocketFactory socketFactory = getSocketFactory(caFilePath,

                    clientCrtFilePath, clientKeyFilePath, "");

            options.setSocketFactory(socketFactory);



            System.out.println("starting connect the server...");

            client.connect(options);

            System.out.println("connected!");

            Thread.sleep(1000);



            client.subscribe(

                    "test",

                    0);

            client.disconnect();

            System.out.println("disconnected!");





        } catch (MqttException e) {

            e.printStackTrace();

        } catch (Exception e) {

            e.printStackTrace();

        }



    }



    private static SSLSocketFactory getSocketFactory(final String caCrtFile,

            final String crtFile, final String keyFile, final String password)

            throws Exception {

        Security.addProvider(new BouncyCastleProvider());



        // load CA certificate

        X509Certificate caCert = null;



        FileInputStream fis = new FileInputStream(caCrtFile);

        BufferedInputStream bis = new BufferedInputStream(fis);

        CertificateFactory cf = CertificateFactory.getInstance("X.509");



        while (bis.available() > 0) {

            caCert = (X509Certificate) cf.generateCertificate(bis);

            // System.out.println(caCert.toString());

        }



        // load client certificate

        bis = new BufferedInputStream(new FileInputStream(crtFile));

        X509Certificate cert = null;

        while (bis.available() > 0) {

            cert = (X509Certificate) cf.generateCertificate(bis);

            // System.out.println(caCert.toString());

        }



        // load client private key

        PEMParser pemParser = new PEMParser(new FileReader(keyFile));

        Object object = pemParser.readObject();

        PEMDecryptorProvider decProv = new JcePEMDecryptorProviderBuilder()

                .build(password.toCharArray());

        JcaPEMKeyConverter converter = new JcaPEMKeyConverter()

                .setProvider("BC");

        KeyPair key;

        if (object instanceof PEMEncryptedKeyPair) {

            System.out.println("Encrypted key - we will use provided password");

            key = converter.getKeyPair(((PEMEncryptedKeyPair) object)

                    .decryptKeyPair(decProv));

        } else {

            System.out.println("Unencrypted key - no password needed");

            key = converter.getKeyPair((PEMKeyPair) object);

        }

        pemParser.close();



        // CA certificate is used to authenticate server

        KeyStore caKs = KeyStore.getInstance(KeyStore.getDefaultType());

        caKs.load(null, null);

        caKs.setCertificateEntry("ca-certificate", caCert);

        TrustManagerFactory tmf = TrustManagerFactory.getInstance("X509");

        tmf.init(caKs);



        // client key and certificates are sent to server so it can authenticate

        // us

        KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());

        ks.load(null, null);

        ks.setCertificateEntry("certificate", cert);

        ks.setKeyEntry("private-key", key.getPrivate(), password.toCharArray(),

                new java.security.cert.Certificate { cert });

        KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory

                .getDefaultAlgorithm());

        kmf.init(ks, password.toCharArray());



        // finally, create SSL socket factory

        SSLContext context = SSLContext.getInstance("TLSv1.2");

        context.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);



        return context.getSocketFactory();

    }



}

I am getting following console log and error

Unencrypted key - no password needed

starting connect the server...

Unable to connect to server (32103) - java.net.ConnectException: Connection timed out: connect

    at org.eclipse.paho.client.mqttv3.internal.TCPNetworkModule.start(TCPNetworkModule.java:79)

    at org.eclipse.paho.client.mqttv3.internal.SSLNetworkModule.start(SSLNetworkModule.java:82)

    at org.eclipse.paho.client.mqttv3.internal.ClientComms$ConnectBG.run(ClientComms.java:590)

    at java.lang.Thread.run(Unknown Source)

Caused by: java.net.ConnectException: Connection timed out: connect

    at java.net.DualStackPlainSocketImpl.waitForConnect(Native Method)

    at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)

    at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)

    at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)

    at java.net.AbstractPlainSocketImpl.connect(Unknown Source)

    at java.net.PlainSocketImpl.connect(Unknown Source)

    at java.net.SocksSocketImpl.connect(Unknown Source)

    at java.net.Socket.connect(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.connect(Unknown Source)

    at org.eclipse.paho.client.mqttv3.internal.TCPNetworkModule.start(TCPNetworkModule.java:70)

    ... 3 more

please help me to connect to aws IOT so that i can update shadow or atleast pub/sub to topics.

mqtt publish-subscribe tls1.2 paho aws-iot

share|improve this question

asked 2 days ago

subodh007

1186

New contributor

subodh007 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

I created thing on AWS core. Then downloaded cert, private key and rootCa certificate too. My main goal is to publish and subscribe to AWS shadow so that I can automate my home lighting system.
I tried to connect to aws iot using paho mqtt java client code, using following code.

    package test.pub;



    import java.io.BufferedInputStream;

    import java.io.FileInputStream;

    import java.io.FileReader;

    import java.security.KeyPair;

    import java.security.KeyStore;

    import java.security.Security;

    import java.security.cert.CertificateFactory;

    import java.security.cert.X509Certificate;



    import javax.net.ssl.KeyManagerFactory;

    import javax.net.ssl.SSLContext;

    import javax.net.ssl.SSLSocketFactory;

    import javax.net.ssl.TrustManagerFactory;



    import org.bouncycastle.jce.provider.BouncyCastleProvider;

    import org.bouncycastle.openssl.PEMDecryptorProvider;

    import org.bouncycastle.openssl.PEMEncryptedKeyPair;

    import org.bouncycastle.openssl.PEMKeyPair;

    import org.bouncycastle.openssl.PEMParser;

    import org.bouncycastle.openssl.jcajce.JcaPEMKeyConverter;

    import org.bouncycastle.openssl.jcajce.JcePEMDecryptorProviderBuilder;

    import org.eclipse.paho.client.mqttv3.MqttClient;

    import org.eclipse.paho.client.mqttv3.MqttConnectOptions;

    import org.eclipse.paho.client.mqttv3.MqttException;



    public class App {



        public static void main(String args) {



            String serverUrl = "ssl://xxxxxxxx.iot.us-east- 

       1.amazonaws.com:8883";

            String caFilePath = "ca1.pem";

            String clientCrtFilePath = "thing.cert.pem";

            String clientKeyFilePath = "thing.private.key";



        MqttClient client;

        try {

            client = new MqttClient(serverUrl, MqttClient.generateClientId());

            MqttConnectOptions options = new MqttConnectOptions();



            options.setConnectionTimeout(60);

            options.setKeepAliveInterval(60);

            options.setMqttVersion(MqttConnectOptions.MQTT_VERSION_3_1);





            SSLSocketFactory socketFactory = getSocketFactory(caFilePath,

                    clientCrtFilePath, clientKeyFilePath, "");

            options.setSocketFactory(socketFactory);



            System.out.println("starting connect the server...");

            client.connect(options);

            System.out.println("connected!");

            Thread.sleep(1000);



            client.subscribe(

                    "test",

                    0);

            client.disconnect();

            System.out.println("disconnected!");





        } catch (MqttException e) {

            e.printStackTrace();

        } catch (Exception e) {

            e.printStackTrace();

        }



    }



    private static SSLSocketFactory getSocketFactory(final String caCrtFile,

            final String crtFile, final String keyFile, final String password)

            throws Exception {

        Security.addProvider(new BouncyCastleProvider());



        // load CA certificate

        X509Certificate caCert = null;



        FileInputStream fis = new FileInputStream(caCrtFile);

        BufferedInputStream bis = new BufferedInputStream(fis);

        CertificateFactory cf = CertificateFactory.getInstance("X.509");



        while (bis.available() > 0) {

            caCert = (X509Certificate) cf.generateCertificate(bis);

            // System.out.println(caCert.toString());

        }



        // load client certificate

        bis = new BufferedInputStream(new FileInputStream(crtFile));

        X509Certificate cert = null;

        while (bis.available() > 0) {

            cert = (X509Certificate) cf.generateCertificate(bis);

            // System.out.println(caCert.toString());

        }



        // load client private key

        PEMParser pemParser = new PEMParser(new FileReader(keyFile));

        Object object = pemParser.readObject();

        PEMDecryptorProvider decProv = new JcePEMDecryptorProviderBuilder()

                .build(password.toCharArray());

        JcaPEMKeyConverter converter = new JcaPEMKeyConverter()

                .setProvider("BC");

        KeyPair key;

        if (object instanceof PEMEncryptedKeyPair) {

            System.out.println("Encrypted key - we will use provided password");

            key = converter.getKeyPair(((PEMEncryptedKeyPair) object)

                    .decryptKeyPair(decProv));

        } else {

            System.out.println("Unencrypted key - no password needed");

            key = converter.getKeyPair((PEMKeyPair) object);

        }

        pemParser.close();



        // CA certificate is used to authenticate server

        KeyStore caKs = KeyStore.getInstance(KeyStore.getDefaultType());

        caKs.load(null, null);

        caKs.setCertificateEntry("ca-certificate", caCert);

        TrustManagerFactory tmf = TrustManagerFactory.getInstance("X509");

        tmf.init(caKs);



        // client key and certificates are sent to server so it can authenticate

        // us

        KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());

        ks.load(null, null);

        ks.setCertificateEntry("certificate", cert);

        ks.setKeyEntry("private-key", key.getPrivate(), password.toCharArray(),

                new java.security.cert.Certificate { cert });

        KeyManagerFactory kmf = KeyManagerFactory.getInstance(KeyManagerFactory

                .getDefaultAlgorithm());

        kmf.init(ks, password.toCharArray());



        // finally, create SSL socket factory

        SSLContext context = SSLContext.getInstance("TLSv1.2");

        context.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);



        return context.getSocketFactory();

    }



}

I am getting following console log and error

Unencrypted key - no password needed

starting connect the server...

Unable to connect to server (32103) - java.net.ConnectException: Connection timed out: connect

    at org.eclipse.paho.client.mqttv3.internal.TCPNetworkModule.start(TCPNetworkModule.java:79)

    at org.eclipse.paho.client.mqttv3.internal.SSLNetworkModule.start(SSLNetworkModule.java:82)

    at org.eclipse.paho.client.mqttv3.internal.ClientComms$ConnectBG.run(ClientComms.java:590)

    at java.lang.Thread.run(Unknown Source)

Caused by: java.net.ConnectException: Connection timed out: connect

    at java.net.DualStackPlainSocketImpl.waitForConnect(Native Method)

    at java.net.DualStackPlainSocketImpl.socketConnect(Unknown Source)

    at java.net.AbstractPlainSocketImpl.doConnect(Unknown Source)

    at java.net.AbstractPlainSocketImpl.connectToAddress(Unknown Source)

    at java.net.AbstractPlainSocketImpl.connect(Unknown Source)

    at java.net.PlainSocketImpl.connect(Unknown Source)

    at java.net.SocksSocketImpl.connect(Unknown Source)

    at java.net.Socket.connect(Unknown Source)

    at sun.security.ssl.SSLSocketImpl.connect(Unknown Source)

    at org.eclipse.paho.client.mqttv3.internal.TCPNetworkModule.start(TCPNetworkModule.java:70)

    ... 3 more

please help me to connect to aws IOT so that i can update shadow or atleast pub/sub to topics.

mqtt publish-subscribe tls1.2 paho aws-iot

mqtt publish-subscribe tls1.2 paho aws-iot

share|improve this question

asked 2 days ago

subodh007

1186

New contributor

subodh007 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

asked 2 days ago

subodh007

1186

New contributor

subodh007 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

share|improve this question

asked 2 days ago

subodh007

1186

New contributor

subodh007 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 2 days ago

subodh007

1186

asked 2 days ago

subodh007

1186

1186

New contributor

subodh007 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

New contributor

subodh007 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

subodh007 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  Double check you have the right host name for the broker you are trying to connect to. A time out error implies that there is nothing listening where you think it is. That or possibly a firewall somewhere is dropping packets.
  – hardillb
  2 days ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  @hardillb I am using aws endpoint :- xxxxxxxx.iot.us-east- 1.amazonaws.com to connect to aws iot thing. here xxxxxxxx is prefix.
  – subodh007
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  yes, I understand you've changed it to post here, but check the real value.
  – hardillb
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  @hardillb I checked all details but no success yet
  – subodh007
  2 hours ago
  
  
  

  
  
  
  

add a comment | 

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  Double check you have the right host name for the broker you are trying to connect to. A time out error implies that there is nothing listening where you think it is. That or possibly a firewall somewhere is dropping packets.
  – hardillb
  2 days ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  @hardillb I am using aws endpoint :- xxxxxxxx.iot.us-east- 1.amazonaws.com to connect to aws iot thing. here xxxxxxxx is prefix.
  – subodh007
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  yes, I understand you've changed it to post here, but check the real value.
  – hardillb
  yesterday
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  @hardillb I checked all details but no success yet
  – subodh007
  2 hours ago
  
  
  

  
  
  
  

1

1

Double check you have the right host name for the broker you are trying to connect to. A time out error implies that there is nothing listening where you think it is. That or possibly a firewall somewhere is dropping packets.
– hardillb
2 days ago

Double check you have the right host name for the broker you are trying to connect to. A time out error implies that there is nothing listening where you think it is. That or possibly a firewall somewhere is dropping packets.
– hardillb
2 days ago

@hardillb I am using aws endpoint :- xxxxxxxx.iot.us-east- 1.amazonaws.com to connect to aws iot thing. here xxxxxxxx is prefix.
– subodh007
yesterday

@hardillb I am using aws endpoint :- xxxxxxxx.iot.us-east- 1.amazonaws.com to connect to aws iot thing. here xxxxxxxx is prefix.
– subodh007
yesterday

yes, I understand you've changed it to post here, but check the real value.
– hardillb
yesterday

yes, I understand you've changed it to post here, but check the real value.
– hardillb
yesterday

@hardillb I checked all details but no success yet
– subodh007
2 hours ago

@hardillb I checked all details but no success yet
– subodh007
2 hours ago

add a comment | 

active

oldest

votes

Your Answer

StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

subodh007 is a new contributor. Be nice, and check out our Code of Conduct.

 

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53372832%2funable-to-connect-to-aws-iot-using-paho-mqtt-java-client-code%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

active

oldest

votes

active

oldest

votes

active

oldest

votes

active

oldest

votes

subodh007 is a new contributor. Be nice, and check out our Code of Conduct.

 

draft saved

draft discarded

subodh007 is a new contributor. Be nice, and check out our Code of Conduct.

subodh007 is a new contributor. Be nice, and check out our Code of Conduct.

subodh007 is a new contributor. Be nice, and check out our Code of Conduct.

 

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53372832%2funable-to-connect-to-aws-iot-using-paho-mqtt-java-client-code%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

Name

Name

Email

Required, but never shown

Email

Required, but never shown

Email

Required, but never shown

Email

Required, but never shown

Name

Name

Email

Required, but never shown

Email

Required, but never shown

Email

Required, but never shown

Email

Required, but never shown

This page is only for reference, If you need detailed information, please check here