From 460ede944178f0d08d9adc7cd7ddb270fa82caec Mon Sep 17 00:00:00 2001
From: mricher <maximilien.richer@insa-rennes.fr>
Date: Tue, 5 Jan 2016 22:41:51 +0100
Subject: [PATCH] Server lib
---
net/server.go | 59 +++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 59 insertions(+)
create mode 100644 net/server.go
diff --git a/net/server.go b/net/server.go
new file mode 100644
index 0000000..9a7b14e
--- /dev/null
+++ b/net/server.go
@@ -0,0 +1,59 @@
+package net
+
+import (
+ "crypto/tls"
+ "crypto/x509"
+ "flag"
+ "fmt"
+ "io/ioutil"
+ "log"
+ "net"
+
+ "golang.org/x/net/context"
+ "google.golang.org/grpc"
+ "google.golang.org/grpc/credentials"
+ "google.golang.org/grpc/grpclog"
+)
+
+// Create a new grpc server with given tls creds
+//
+// cert/key/ca are PEM-encoded array of byte
+//
+// The returned grpcServer must be used in association with server{} to
+// register APIs before calling Listen()
+func NewServer(cert, key, ca []byte) *Server {
+ // configure gRPC
+ var opts []grpc.ServerOption
+
+ serverCert, err := tls.X509KeyPair(cert, key)
+ if err != nil {
+ log.Fatal("Load peer cert/key error: %v", err)
+ }
+ caCertPool := x509.NewCertPool()
+ caCertPool.AppendCertsFromPEM(ca)
+
+ // configure transport authentificator
+ ta := credentials.NewTLS(&tls.Config{
+ Certificates: []tls.Certificate{serverCert},
+ RootCAs: caCertPool,
+ ClientCAs: caCertPool,
+ ClientAuth: tls.RequireAndVerifyClientCert,
+ })
+
+ opts = []grpc.ServerOption{grpc.Creds(ta)}
+ return grpc.NewServer(opts...)
+}
+
+// Listen with specified server on addr:port TCP
+//
+// addr is the addr to bind to
+// port is the port to listen on
+func Listen(addr, port string, grpcServer *Server) {
+ // open tcp socket
+ lis, err := net.Listen("tcp", fmt.Sprintf(":%d", *port))
+ if err != nil {
+ grpclog.Fatalf("Failed to open tcp socket: %v", err)
+ }
+
+ grpcServer.Serve(lis)
+}
--
GitLab