Files
tonic/examples/src/tls_client_auth/server.rs
T

52 lines
1.5 KiB
Rust

pub mod pb {
tonic::include_proto!("grpc.examples.unaryecho");
}
use pb::{EchoRequest, EchoResponse};
use tonic::transport::{Certificate, Identity, Server, ServerTlsConfig};
use tonic::{Request, Response, Status};
type EchoResult<T> = Result<Response<T>, Status>;
#[derive(Default)]
pub struct EchoServer;
#[tonic::async_trait]
impl pb::echo_server::Echo for EchoServer {
async fn unary_echo(&self, request: Request<EchoRequest>) -> EchoResult<EchoResponse> {
let certs = request
.peer_certs()
.expect("Client did not send its certs!");
println!("Got {} peer certs!", certs.len());
let message = request.into_inner().message;
Ok(Response::new(EchoResponse { message }))
}
}
#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
let cert = tokio::fs::read("examples/data/tls/server.pem").await?;
let key = tokio::fs::read("examples/data/tls/server.key").await?;
let server_identity = Identity::from_pem(cert, key);
let client_ca_cert = tokio::fs::read("examples/data/tls/client_ca.pem").await?;
let client_ca_cert = Certificate::from_pem(client_ca_cert);
let addr = "[::1]:50051".parse().unwrap();
let server = EchoServer::default();
let tls = ServerTlsConfig::new()
.identity(server_identity)
.client_ca_root(client_ca_cert);
Server::builder()
.tls_config(tls)?
.add_service(pb::echo_server::EchoServer::new(server))
.serve(addr)
.await?;
Ok(())
}