cheshire
/
hscloud
forked from hswaw/hscloud
1
0
Fork 0
Code Pull Requests Activity

Add clientside code for gRPC

master
Serge Bazanski 2018-10-06 18:17:56 +01:00
parent 52478b5627
commit 624295da66
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
grpc.go
View File

@ -192,3 +192,25 @@ func WithServerHSPKI() []grpc.ServerOption {
return []grpc.ServerOption{creds, interceptor}
}
func WithClientHSPKI() grpc.DialOption {
certPool := x509.NewCertPool()
ca, err := ioutil.ReadFile(flagCAPath)
if err != nil {
glog.Exitf("WithClientHSPKI: cannot load CA certificate: %v", err)
}
if ok := certPool.AppendCertsFromPEM(ca); !ok {
glog.Exitf("WithClientHSPKI: cannot use CA certificate: %v", err)
}
clientCert, err := tls.LoadX509KeyPair(flagCertificatePath, flagKeyPath)
if err != nil {
glog.Exitf("WithClientHSPKI: cannot load service certificate/key: %v", err)
}
creds := credentials.NewTLS(&tls.Config{
Certificates: []tls.Certificate{clientCert},
RootCAs: certPool,
})
return grpc.WithTransportCredentials(creds)
}