GolangRPCTLS配置详解

openssl req -newkey rsa:2048 -nodes -keyout server.key -x509 -days 365 -out server.crt -subj "/CN=localhost"

import ( "crypto/tls" "log" "net" "net/rpc" )

type Args struct { A, B int }

type Calculator int

func (c Calculator) Multiply(args Args, reply int) error { reply = args.A args.B return nil }

func main() { cert, err := tls.LoadX509KeyPair("server.crt", "server.key") if err != nil { log.Fatal("无法加载证书:", err) }

config := &tls.Config{Certificates: []tls.Certificate{cert}}
listener, err := tls.Listen("tcp", ":8443", config)
if err != nil {
    log.Fatal("启动 TLS 监听失败:", err)
}
defer listener.Close()

rpc.Register(new(Calculator))
log.Println("RPC 服务已启动，地址: ", listener.Addr())

for {
    conn, err := listener.Accept()
    if err != nil {
        log.Println("接受连接失败:", err)
        continue
    }
    go rpc.ServeConn(conn)
}

}

import ( "crypto/tls" "crypto/x509" "log" "net/rpc" )

func main() { cert, err := x509.LoadPEMFromFile("server.crt") if err != nil { log.Fatal("读取证书失败:", err) }

rootCAs := x509.NewCertPool()
rootCAs.AppendCertsFromPEM(cert)

config := &tls.Config{RootCAs: rootCAs}
conn, err := tls.Dial("tcp", "localhost:8443", config)
if err != nil {
    log.Fatal("连接失败:", err)
}
defer conn.Close()

client := rpc.NewClient(conn)
defer client.Close()

args := Args{A: 7, B: 8}
var reply int
err = client.Call("Calculator.Multiply", args, &reply)
if err != nil {
    log.Fatal("调用失败:", err)
}

log.Printf("结果: %d", reply)

}