gRPC之双向认证初入

Posted 2021-07-11 程序彤

1. 生成.pem和.key文件
2. server.go文件

package main

import (
	"crypto/tls"
	"crypto/x509"
	"google.golang.org/grpc"
	"google.golang.org/grpc/credentials"
	"io/ioutil"
	"learnProto/services/proto"
	"net"
)

func main(){
	cert, _ := tls.LoadX509KeyPair("cert/server.pem", "cert/server.key")
	certPool := x509.NewCertPool()
	ca, _ := ioutil.ReadFile("cert/ca.pem")
	certPool.AppendCertsFromPEM(ca)

	creds := credentials.NewTLS(&tls.Config{
		Certificates: []tls.Certificate{cert}, // 服务端证书
		ClientAuth:   tls.RequireAndVerifyClientCert, // 双向验证
		ClientCAs:    certPool,
	})

	rpcServer := grpc.NewServer(grpc.Creds(creds)) // 传入证书
	//rpcServer := grpc.NewServer() // 传入证书
	proto.RegisterProdServiceServer(rpcServer,new(proto.ProdService))
	//listen, _ := net.Listen("tcp", ":8081")
	//rpcServer.Serve(listen)
	//mux:= http.NewServeMux()
	//mux.HandleFunc("/", func(writer http.ResponseWriter, request *http.Request) {
	//	fmt.Println(request.Proto)
	//	fmt.Println(request)
	//	rpcServer.ServeHTTP(writer,request)
	//})
	//httpServer := &http.Server{
	//	Addr:    ":8081",
	//	Handler: mux,
	//}
	//httpServer.ListenAndServeTLS("")
	lis, _ := net.Listen("tcp", ":8081")
	rpcServer.Serve(lis)
}

3. client.go文件

package main

import (
	"context"
	"crypto/tls"
	"crypto/x509"
	"fmt"
	"google.golang.org/grpc"
	"google.golang.org/grpc/credentials"
	"io/ioutil"
	"learnProto/services/proto"
	"log"
)

func main(){

	cert, _ := tls.LoadX509KeyPair("cert/client.pem", "cert/client.key")
	certPool := x509.NewCertPool()
	ca, _ := ioutil.ReadFile("cert/ca.pem")
	certPool.AppendCertsFromPEM(ca)

	creds := credentials.NewTLS(&tls.Config{
		Certificates: []tls.Certificate{cert}, // 客户端证书
		ServerName: "localhost", // 域名
		RootCAs: certPool, // 根证书
	})
	conn, err := grpc.Dial(":8081",grpc.WithTransportCredentials(creds)) //grpc.WithInsecure()
	//conn, err := grpc.Dial(":8081",grpc.WithInsecure()) //
	if err!=nil {
		log.Fatal(err)
	}
	defer conn.Close()
	productClient := proto.NewProdServiceClient(conn)
	productRes, err := productClient.GetProdStock(context.Background(), &proto.ProdRequset{
		ProdId: 66,
	})
	if err!=nil{
		log.Fatal(err)
	}
	fmt.Println(productRes.ProdStock)
}