第一次,站长亲自招 Gopher 了>>>

grpc加密TLS初体验(go、java版本)

grpc-go、java的安装编译helloworld可以参考如下文章

http://my.oschina.net/ysh3940/blog/403591

openssl的安装、生成秘钥证书可以参考如下文章

http://my.oschina.net/ysh3940/blog/464208

示例代码go版本

服务端代码

package main

import (

"fmt"

"log"

"net"

pb "github.com/grpc/grpc-common/go/helloworld"

"golang.org/x/net/context"

"google.golang.org/grpc"

"google.golang.org/grpc/credentials"

)

const (

port = ":50051"

)

type server struct{}

func (s *server) SayHello(ctx context.Context, in *pb.HelloRequest) (*pb.HelloReply, error) {

fmt.Println("--->>> request name = ", in.Name)

return &pb.HelloReply{Message: "--->>> Hello " + in.Name}, nil

}

func main() {

lis, err := net.Listen("tcp", port)

if err != nil {

log.Fatalf("failed to listen: %v", err)

}

fmt.Println(">>> server is starting in 127.0.0.1 and port " + port + " >>>")

s := grpc.NewServer()

pb.RegisterGreeterServer(s, &server{})

creds, err := credentials.NewServerTLSFromFile("D:/BaiduYunDownload/server1.pem", "D:/BaiduYunDownload/server1.key")

if err != nil {

fmt.Println("Failed to generate credentials: ", err)

}

s.Serve(creds.NewListener(lis))

}

客户端代码

package main

import (

  "log"

  "os"

  pb "github.com/grpc/grpc-common/go/helloworld"

  "golang.org/x/net/context"

  "google.golang.org/grpc"

  "google.golang.org/grpc/credentials"

)

const (

  address   = "127.0.0.1:50051"

  defaultName = "world"

)

func main() {

  var opts []grpc.DialOption

  var creds credentials.TransportAuthenticator

  var err error

  creds, err = credentials.NewClientTLSFromFile("D:/BaiduYunDownload/ca.pem", "x.test.youtube.com")

  if err != nil {

    log.Fatalf("Failed to create TLS credentials %v", err)

  }

  opts = append(opts, grpc.WithTransportCredentials(creds))

  conn, err := grpc.Dial(address, opts...)

  if err != nil {

    log.Fatalf("did not connect: %v", err)

  }

  log.Printf(">>> connect success >>>")

  defer conn.Close()

  c := pb.NewGreeterClient(conn)

  name := defaultName

  if len(os.Args) > 1 {

    name = os.Args[1]

  }

  r, err := c.SayHello(context.Background(), &pb.HelloRequest{Name: name})

  if err != nil {

    log.Fatalf("could not greet: %v", err)

  }

  log.Printf("Greeting: %s", r.Message)

}

示例代码java版本

服务端代码:

package io.grpc.examples.helloworld;

import io.grpc.ServerImpl;

import io.grpc.stub.StreamObserver;

import io.grpc.transport.netty.NettyServerBuilder;

import io.netty.handler.ssl.SslContext;

import java.io.File;

import java.util.logging.Logger;

public class HelloWorldServer {

private static final Logger logger = Logger

.getLogger(HelloWorldServer.class.getName());

private int port = 50051;

private ServerImpl server;

private void start() throws Exception {

@SuppressWarnings("deprecation")

SslContext sslContext = SslContext.newServerContext(new File(

"D:/BaiduYunDownload/server3.pem"), new File(

"D:/BaiduYunDownload/server3_pkcs8.key"));

server = NettyServerBuilder.forPort(port).sslContext(sslContext)

.addService(GreeterGrpc.bindService(new GreeterImpl())).build()

.start();

logger.info("Server started, listening on " + port);

Runtime.getRuntime().addShutdownHook(new Thread() {

@Override

public void run() {

System.err

.println("*** shutting down gRPC server since JVM is shutting down");

HelloWorldServer.this.stop();

System.err.println("*** server shut down");

}

});

}

private void stop() {

if (server != null) {

server.shutdown();

}

}

public static void main(String[] args) throws Exception {

final HelloWorldServer server = new HelloWorldServer();

server.start();

}

private class GreeterImpl implements GreeterGrpc.Greeter {

@Override

public void sayHello(HelloRequest req,

StreamObserver<HelloResponse> responseObserver) {

System.out.println("--->>> name = " + req.getName());

HelloResponse reply = HelloResponse.newBuilder()

.setMessage("Hello " + req.getName()).build();

responseObserver.onValue(reply);

responseObserver.onCompleted();

}

}

}

客户端代码:

package io.grpc.examples.helloworld;

import io.grpc.ChannelImpl;

import io.grpc.transport.netty.NegotiationType;

import io.grpc.transport.netty.NettyChannelBuilder;

import io.netty.handler.ssl.SslContext;

import java.io.File;

import java.security.NoSuchAlgorithmException;

import java.util.concurrent.TimeUnit;

import java.util.logging.Level;

import java.util.logging.Logger;

import javax.net.ssl.SSLException;

public class HelloWorldClient {

private static final Logger logger = Logger

.getLogger(HelloWorldClient.class.getName());

private final ChannelImpl channel;

private final GreeterGrpc.GreeterBlockingStub blockingStub;

public HelloWorldClient(String host, int port) throws SSLException,

NoSuchAlgorithmException {

@SuppressWarnings("deprecation")

// 这里要注意下由于java版本的没有提供像go那样的可以指定域名

// java版本源代码中把host传入作为证书域名

// 域名是在证书生成的过程中自己输入的

SslContext sslContext = SslContext.newClientContext(new File(

"D:/BaiduYunDownload/ca3.pem"));

channel = NettyChannelBuilder.forAddress(host, port)

.sslContext(sslContext).negotiationType(NegotiationType.TLS)

.build();

blockingStub = GreeterGrpc.newBlockingStub(channel);

}

public void shutdown() throws InterruptedException {

channel.shutdown().awaitTerminated(5, TimeUnit.SECONDS);

}

public void greet(String name) {

try {

logger.info("Will try to greet " + name);

HelloRequest request = HelloRequest.newBuilder().setName(name)

.build();

HelloResponse response = blockingStub.sayHello(request);

logger.info("Greeting: " + response.getMessage());

} catch (RuntimeException e) {

logger.log(Level.WARNING, "RPC failed", e);

return;

}

}

public static void main(String[] args) throws Exception {

HelloWorldClient client = new HelloWorldClient("localhost", 50051);

try {

String user = "world";

if (args.length > 0) {

user = args[0];

}

client.greet(user);

} finally {

client.shutdown();

}

}

}

示例代码下载

http://pan.baidu.com/s/1pJFpTKR

http://pan.baidu.com/s/1o6l5Q6u

---

本文来自:开源中国博客

感谢作者:晓阳

查看原文:grpc加密TLS初体验(go、java版本)

13418 次点击

上一篇:原来Go2.0的泛型是这样的...

下一篇:golang list slice 删除其中一项比对

grpc io 代码 net

• 编辑
• 预览