我正在尝试使用aleph连接到相互认证的Docker守护程序。 aleph文档显示,可以出于身份验证目的而传入netty SSL上下文。似乎我在正确创建SslContext,但是所有请求都已关闭
(require '[aleph.http :as http])
(import '[io.netty.handler.ssl SslContext])
(import '[io.netty.handler.ssl SslProvider])
(import '[io.netty.handler.ssl SslContextBuilder])
(def ctx
(doto (SslContextBuilder/forClient)
(.keyManager (java.io.File. "certs/cert.pem")
(java.io.File. "certs/client.pkcs8"))
(.trustManager (java.io.File. "certs/ca.pem"))
(.build)))
(let [pool (http/connection-pool {:connection-options {:ssl-context ctx}})]
@(http/get (str "http://" host ":" port "/info") {:pool pool}))
结果为:“ExceptionInfo连接已关闭clojure.core / ex-info(core.clj:4617)”
有没有人找到使用TLS进行连接的好方法?我已经尝试过https://github.com/aphyr/less-awful-ssl,但是对于netty来说效果不佳。帮助thnx!
最佳答案
发现我在创建SslContext对象时出错。应该是这样的:
(def ctx
(.build
(.keyManager
(.trustManager (SslContextBuilder/forClient) ca)
cert client-key)))
;; pass in ssl-context via pool
(let [pool (http/connection-pool {:connection-options {:ssl-context ctx}})]
(-> @(http/get (str "https://" host ":" port "/info") {:pool pool})
:body
bs/to-string))