s2n-quic-rustls

这个crate将rustls集成为s2n-quic的TLS提供者。

许可证

该项目采用Apache-2.0许可证。

安装

在你的项目目录中运行以下Cargo命令：

cargo add s2n-quic-rustls

或者在Cargo.toml中添加以下行：

s2n-quic-rustls = "0.63.0"

示例代码

以下是一个使用s2n-quic-rustls实现QUIC通信的完整示例：

use s2n_quic::{client, server};
use s2n_quic_rustls::{Client, Server};
use std::{error::Error, net::Ipv4Addr};

#[tokio::main]
async fn main() -> Result<(), Box<dyn Error>> {
    // 创建服务器配置
    let server_cert = include_bytes!("../path/to/cert.pem");
    let server_key = include_bytes!("../path/to/key.pem");
    
    let mut server = server::Builder::new()
        .with_tls((server_cert, server_key))?
        .with_application_protos(&["my-protocol"])?
        .with_ip(Ipv4Addr::LOCALHOST.into())?
        .start()?;

    // 创建客户端配置  
    let client_cert = include_bytes!("../path/to/cert.pem");
    let client = client::Builder::new()
        .with_tls(client_cert)?
        .with_application_protos(&["my-protocol"])?
        .start()?;

    // 在另一个任务中运行服务器
    tokio::spawn(async move {
        while let Some(mut connection) = server.accept().await {
            tokio::spawn(async move {
                while let Ok(Some(mut stream)) = connection.accept_bidirectional_stream().await {
                    tokio::spawn(async move {
                        let mut buf = [0u8; 1024];
                        while let Ok(Some(bytes)) = stream.receive(&mut buf).await {
                            println!("Server received: {:?}", &buf[..bytes]);
                            stream.send(&buf[..bytes]).await.unwrap();
                        }
                    });
                }
            });
        }
    });

    // 客户端连接并发送数据
    let mut connection = client
        .connect(server.local_addr()?, "localhost")?
        .await?;
    
    let mut stream = connection.open_bidirectional_stream().await?;
    stream.send(b"Hello from client").await?;
    
    let mut buf = [0u8; 1024];
    let bytes = stream.receive(&mut buf).await?.unwrap();
    println!("Client received: {:?}", &buf[..bytes]);

    Ok(())
}

完整示例

以下是一个更完整的示例，包含证书生成和更详细的错误处理：

use s2n_quic::{client, server};
use s2n_quic_rustls::{Client, Server};
use std::{error::Error, net::Ipv4Addr, path::Path};

// 生成自签名证书的函数
fn generate_cert() -> Result<(Vec<u8>, Vec<u8>), Box<dyn Error>> {
    let cert = rcgen::generate_simple_self_signed(vec!["localhost".into()])?;
    let cert_der = cert.serialize_der()?;
    let key_der = cert.serialize_private_key_der();
    Ok((cert_der, key_der.into_bytes()))
}

#[tokio::main]
async fn main() -> Result<(), Box<dyn Error>> {
    // 生成证书
    let (cert_der, key_der) = generate_cert()?;
    
    // 创建服务器配置
    let mut server = server::Builder::new()
        .with_tls((&cert_der, &key_der))?
        .with_application_protos(&["my-protocol"])?
        .with_ip(Ipv4Addr::LOCALHOST.into())?
        .start()?;

    println!("Server listening on: {}", server.local_addr()?);

    // 创建客户端配置
    let client = client::Builder::new()
        .with_tls(&cert_der)?
        .with_application_protos(&["my-protocol"])?
        .start()?;

    // 服务器任务
    tokio::spawn(async move {
        while let Some(mut connection) = server.accept().await {
            println!("Server: New connection from {:?}", connection.remote_addr());
            
            tokio::spawn(async move {
                while let Ok(Some(mut stream)) = connection.accept_bidirectional_stream().await {
                    println!("Server: New stream opened");
                    
                    tokio::spawn(async move {
                        let mut buf = [0u8; 1024];
                        while let Ok(Some(bytes)) = stream.receive(&mut buf).await {
                            let msg = &buf[..bytes];
                            println!("Server received: {:?}", String::from_utf8_lossy(msg));
                            
                            // 回显消息
                            if let Err(e) = stream.send(msg).await {
                                println!("Server send error: {}", e);
                                break;
                            }
                        }
                    });
                }
            });
        }
    });

    // 客户端连接
    let mut connection = client
        .connect(server.local_addr()?, "localhost")?
        .await?;
    
    println!("Client connected to server");

    // 打开流并发送数据
    let mut stream = connection.open_bidirectional_stream().await?;
    let message = b"Hello from client";
    stream.send(message).await?;
    println!("Client sent: {:?}", String::from_utf8_lossy(message));

    // 接收响应
    let mut buf = [0u8; 1024];
    let bytes = stream.receive(&mut buf).await?.unwrap();
    println!("Client received: {:?}", String::from_utf8_lossy(&buf[..bytes]));

    Ok(())
}

文档

详细的API文档可以在docs.rs上找到。

仓库

项目源代码位于GitHub。

所有者

• aws/s2n-core团队
• Cameron Bytheway