SDK Root Certificate Update Guide

C

#define CORE_AUTH_SDK_VERSION "sdk-c-4.x.x"

external/
├── ali_ca_cert.c
└── mbedtls

const uint16_t port = 8883;
aiot_mqtt_setopt(mqtt_handle, AIOT_MQTTOPT_PORT, (void *)&port);

char       *host = "iot-auth-x.cn-shanghai.aliyuncs.com"; 

int res = aiot_dynreg_setopt(dynreg_handle, AIOT_DYNREGOPT_HOST, (void *)host);

char *bootstrap_host = "iot-auth-global-x.aliyuncs.com";

int res = aiot_bootstrap_setopt(bootstrap_handle, AIOT_BOOTSTRAPOPT_HOST, (void *)bootstrap_host);

char  *host             = "iot-*****-x.coap.iothub.aliyuncs.com";

aiot_coap_setopt(coap_handle, AIOT_COAPOPT_HOST, host);

#define LINKKIT_VERSION     "2.3.0"

git clone https://github.com/aliyun/iotkit-embedded.git -b v2.3.0

    int userPort=8883;
    IOT_Ioctl(IOTX_IOCTL_SET_MQTT_PORT, &userPort);

#define CUSTOME_DOMAIN_HTTP     "iot-auth-x.{region}.aliyuncs.com"

IOT_Ioctl(IOTX_IOCTL_SET_HTTP_DOMAIN, (void *)CUSTOME_DOMAIN_HTTP);

#define IOTX_SDK_VERSION                "3.1.0"
Or
#define IOTX_SDK_VERSION                "3.2.0"

git clone https://github.com/aliyun/iotkit-embedded.git -b v3.2.0
git clone https://github.com/aliyun/iotkit-embedded.git -b v3.1.0

    int userPort=8883;
    IOT_Ioctl(IOTX_IOCTL_SET_MQTT_PORT, &userPort);

#define CUSTOME_DOMAIN_HTTP     "iot-auth-x.{region}.aliyuncs.com"

IOT_Ioctl(IOTX_IOCTL_SET_HTTP_DOMAIN, (void *)CUSTOME_DOMAIN_HTTP);

#define IOTX_SDK_VERSION                "3.0.1"

git clone https://github.com/aliyun/iotkit-embedded.git -b v3.0.1

#define CUSTOME_DOMAIN_HTTP     "iot-auth-x.{region}.aliyuncs.com"

IOT_Ioctl(IOTX_IOCTL_SET_HTTP_DOMAIN, (void *)CUSTOME_DOMAIN_HTTP);

Android SDK

SDK version:

1.7.3.5 or later. See Release notes.

User code changes:

• MQTT connection to IoT Platform:

  See Authentication and connection and use port 8883.

  MqttConfigure.mqttHost = "{YourInstanceId}.mqtt.iothub.aliyuncs.com:8883";
  
  Or
  
  IoTMqttClientConfig clientConfig = new IoTMqttClientConfig();
  clientConfig.channelHost = "a18wP******.iot-as-mqtt.cn-shanghai.aliyuncs.com:8883";
  linkKitInitParams.mqttClientConfig = clientConfig;  

• Dynamic registration:

  If your code uses the deprecated dynamic registration interface (based on the HTTP protocol)

   deviceRegister(LinkKitInitParams initParams, CommonRequest request, IoTCallback listener)

  Use the new MQTT-based dynamic registration interface instead

  deviceDynamicRegister(MqttInitParams initParams, IOnCallListener listener)

  For more information about how to use it, see Authentication and connection.

• HTTP/2 file upload:

  If you use HTTP/2 file upload, explicitly set ioTH2Config.endPoint to the file upload endpoint for your instance. The endpoint must include the -x field.

  IoTH2Config ioTH2Config = new IoTH2Config();
  ioTH2Config.clientId = "client-id";
  ioTH2Config.endPoint = "https://" + productKey + "-x.iot-as-http2.{region_id}.aliyuncs.com:443"; // Production environment. Replace {region_id} with the Region ID of your instance.
  params.iotH2InitParams = ioTH2Config;

Python SDK

SDK version:

1.2.11 or later. See Release notes.

User code changes:

• MQTT connection to IoT Platform:

  See Authentication and connection and use port 8883.

  lk.config_mqtt(port=8883, protocol="MQTTv311", transport="TCP",
              secure="TLS", keep_alive=60, clean_session=True,
              max_inflight_message=20, max_queued_message=0,
              auto_reconnect_min_sec=1,
              auto_reconnect_max_sec=60,
              check_hostname=True,   
              cadata=None)

• Dynamic registration:

  If your code uses the deprecated dynamic registration method (device_secret is an empty string or is not set, and the auth_type field is an empty string or is not set).

  lk_auth = linkkit.LinkKit(
      host_name="cn-shanghai",
      product_key=product_key,
      device_name=device_name,
      device_secret="",
      auth_type="",
      instance_id=instance_id,
      product_secret=product_secret)

  Set auth_type to "register" to use the new MQTT-based dynamic registration method.

Java SDK

SDK version:

1.2.3.7 or later. See Release notes.

User code changes:

• MQTT connection to IoT Platform:

  See Authentication and connection and use port 8883.

  MqttConfigure.mqttHost = "{YourInstanceId}.mqtt.iothub.aliyuncs.com:8883";
  
  Or
  
  IoTMqttClientConfig clientConfig = new IoTMqttClientConfig();
  clientConfig.channelHost = "a18wP******.iot-as-mqtt.cn-shanghai.aliyuncs.com:8883";
  linkKitInitParams.mqttClientConfig = clientConfig;  

• Dynamic registration:

  If your code uses the deprecated dynamic registration interface (based on the HTTP protocol)

   deviceRegister(LinkKitInitParams initParams, CommonRequest request, IoTCallback listener)

  Use the new MQTT-based dynamic registration interface instead

  deviceDynamicRegister(MqttInitParams initParams, IOnCallListener listener)

  For more information about how to use it, see Authentication and connection.

iOS SDK

SDK version:

No change

User code changes:

• MQTT connection to IoT Platform:

  Follow the protocol documentation to change the access domain. See the existing Authentication and connection. The referenced access method is as follows:

  #import <IotLinkKit/IotLinkKit.h>
  
      // Before initialization, register a listener to listen for connection status changes of the persistent connection channel
      [[LinkKitEntry sharedKit] registerChannelListener:self];
  
      //// Enter the device authentication information
      self.productKey = self.textFieldProductKey.text ;
      self.deviceName = self.textFieldDeviceName.text ;
      self.deviceSecret = self.textFieldDeviceSecret.text;
  
      LinkkitChannelConfig * channelConfig = [[LinkkitChannelConfig alloc] init];
      channelConfig.productKey = self.productKey;
      channelConfig.deviceName = self.deviceName;
      channelConfig.deviceSecret = self.deviceSecret;
      channelConfig.cleanSession = (self.cleanSession == 1);
      //channelConfig.server = @"your custom server url";
      //channelConfig.port = 1883;
      LinkkitSetupParams * setupParams = [[LinkkitSetupParams alloc] init];
      setupParams.appVersion = self.appVersion;
      setupParams.channelConfig = channelConfig;
      [[LinkKitEntry sharedKit] setup:setupParams resultBlock:^(BOOL succeeded, NSError * _Nullable error) {
          LinkkitLogDebug(@"setup error : %@", error);
          dispatch_async(dispatch_get_main_queue(), ^{
              [self ims_showHUDWithMessage:[NSString stringWithFormat:@"Linkkit Initialization : %@",
                                            succeeded ? @"Succeeded" : @"Failed"]];
          });
      }];

  The channelConfig.server field on line 16 can no longer use the default value. You must explicitly point it to the new access address.

  • If your instance is a public instance (the device access domain is in the format a18wP******.iot-as-mqtt.cn-shanghai.aliyuncs.com), call channelConfig.server = a18wP********-x.iot-as-mqtt.cn-shanghai.aliyuncs.com in your code to specify the new endpoint. Note that the domain prefix must end with -x.

  • If your instance is an enterprise instance (the device access domain is in the format iot-06*****l.mqtt.iothub.aliyuncs.com), call channelConfig.server = iot-06*****l-x.mqtt.iothub.aliyuncs.com in your code to specify the new endpoint. Note that the domain prefix must end with -x.

JS SDK

SDK version:

No change

User code changes:

• MQTT connection to IoT Platform:

  You need to explicitly specify brokerUrl.

  const iot = require('alibabacloud-iot-device-sdk');
  const device = iot.device({
    productKey: `${productKey}`,
    deviceName: `${deviceName}`,
    deviceSecret: `${deviceSecret}`,
    brokerUrl: `wss://${productKey}-x.iot-as-mqtt.${regionId}.aliyuncs.com:443`,
  });
  ​
  device.on('connect', () => {
    console.log('connect sucessfully!');
  });    

  Note that the brokerUrl field requires the -x suffix. For example, ${productKey}-x.iot-as-mqtt.${regionId}.aliyuncs.com (public instance), or "iot-******-x.http.iothub.aliyuncs.com" (enterprise instance).

• Dynamic registration:

  You need to explicitly specify the registerURL field

  const iot = require('alibabacloud-iot-device-sdk');
  const params = {
    productKey: `${productKey}`,
    productSecret: `${productSecret}`,
    deviceName: `${deviceName}`,
    registerURL: 'https://iot-auth-x.cn-shanghai.aliyuncs.com/auth/register/device'
  };
  let device;
  iot.register(params, (res) => {
    console.log("register:", res);
    if (res.code == '200') {
      // res.data.deviceSecret is the DeviceSecret returned by IoT Platform. Keep the key confidential.
      // After the device successfully connects to IoT Platform by using its authentication information, you cannot use this function to obtain the DeviceSecret again.
      // Create a device object to connect to Alibaba Cloud IoT Platform
      device = iot.device({
        productKey: `${productKey}`,
        deviceName: `${deviceName}`,
        // res.data.deviceSecret is the DeviceSecret returned by IoT Platform
        deviceSecret: res.data.deviceSecret,
      });
    }
  });

  Note that the registerURL field requires the -x suffix.

  Content to add to package.json:

    "overrides": {
      "mqtt": "^4.3.8"
    }

Precautions

#define MBEDTLS_SSL_SERVER_NAME_INDICATION