Connecting to AWSIoT

[FranzBusch]

Hello,

I just came across this project and was super happy that it supported AWSIoT through SOTO. We have been using the official AWSIoT iOS SDK and saw a lot of crashes and wanted to try this out as a replacement.

Sadly, when trying to connect we run into a MQTTNIO.MQTTClient.Error.websocketUpgradeFailed) error. I tried to get the signed url and run it with cURL however with that one I get a 404 Not found response. I think the problem is pretty simple but I just can't figure out where it lies.

The code I use to setup the connection:

                let host = "XXX.iot.eu-west-1.amazonaws.com"
                let port = 443
                let headers = HTTPHeaders([("host", host)])
                let signer = AWSSigner(
                    credentials: StaticCredential(accessKeyId: token.accessKeyId, secretAccessKey: token.secretAccessKey, sessionToken: token.sessionToken),
                    name: "iotdata",
                    region: "eu-west-1"
                )
                let signedURL = signer.signURL(
                    url: URL(string: "https://\(host):\(port)/mqtt")!,
                    method: .GET,
                    headers: headers,
                    body: .none,
                    expires: .minutes(30)
                )
                
                let requestURI = "/mqtt?\(signedURL.query!)"
                let client = MQTTClient(
                    host: host,
                    port: port,
                    identifier: "MyAWSClient",
                    eventLoopGroupProvider: .createNew,
                    configuration: .init(useSSL: true, useWebSockets: true, webSocketURLPath: requestURI)
                )
                client.connect()
                    .whenComplete { result in
                        print(result)
                    }

[adam-fowler]

From first glance the code looks correct. I'll verify if I can get the code working and get back to you.

Stupid questions but they need to be asked
Do your credentials have access to IoT?
Is eu-west-1 the correct region?

[FranzBusch]

@adam-fowler From the docs I found Clients must send the Server Name Indication (SNI) TLS extension could that be something that I am missing? https://docs.aws.amazon.com/iot/latest/developerguide/mqtt.html

[adam-fowler]

What platform are you running on? And are you providing a TLS configuration or an EventLoopGroup during initialisation

[FranzBusch]

I am running on iOS in my iOS simulator. I am not passing anything right now I am just using the default .createNew option like in the code above.

[adam-fowler]

Did you get any further with this? I'm struggling to reproduce the issue. I can get the connect to fail if the policy assigned to my user doesn't allow for me to connect. But the websocket receives a connectionClose in WebSocketHandler.channelRead which you are saying is not the way you are see it fail.

Could it be you are behind a proxy or something like that?

[adam-fowler]

Hi @FranzBusch, I know this is 3 months later, but I was resurrecting a MQTT NIO AWS connection sample recently and started to receive the same issue as you describe above. I managed to fix it by making sure my identifier had been added to the AWS policy attached to the user whose credentials you are using

        {
            "Effect": "Allow",
            "Action": "iot:Connect",
            "Resource": "arn:aws:iot:eu-west-1:931875313149:client/MyAWSClient"
        },