1 pub mod pb {
2     tonic::include_proto!("grpc.examples.unaryecho");
3 }
4 
5 use pb::{EchoRequest, EchoResponse};
6 use tonic::transport::{Certificate, Identity, Server, ServerTlsConfig};
7 use tonic::{Request, Response, Status};
8 
9 type EchoResult<T> = Result<Response<T>, Status>;
10 
11 #[derive(Default)]
12 pub struct EchoServer;
13 
14 #[tonic::async_trait]
15 impl pb::echo_server::Echo for EchoServer {
16     async fn unary_echo(&self, request: Request<EchoRequest>) -> EchoResult<EchoResponse> {
17         let certs = request
18             .peer_certs()
19             .expect("Client did not send its certs!");
20 
21         println!("Got {} peer certs!", certs.len());
22 
23         let message = request.into_inner().message;
24         Ok(Response::new(EchoResponse { message }))
25     }
26 }
27 
28 #[tokio::main]
29 async fn main() -> Result<(), Box<dyn std::error::Error>> {
30     let cert = tokio::fs::read("examples/data/tls/server.pem").await?;
31     let key = tokio::fs::read("examples/data/tls/server.key").await?;
32     let server_identity = Identity::from_pem(cert, key);
33 
34     let client_ca_cert = tokio::fs::read("examples/data/tls/client_ca.pem").await?;
35     let client_ca_cert = Certificate::from_pem(client_ca_cert);
36 
37     let addr = "[::1]:50051".parse().unwrap();
38     let server = EchoServer::default();
39 
40     let tls = ServerTlsConfig::new()
41         .identity(server_identity)
42         .client_ca_root(client_ca_cert);
43 
44     Server::builder()
45         .tls_config(tls)?
46         .add_service(pb::echo_server::EchoServer::new(server))
47         .serve(addr)
48         .await?;
49 
50     Ok(())
51 }
52