[feat] 支持TLS通信，设置SSL协议类型以及证书。#84

NewLifeX · Dec 1, 2024 · 41b8335 · 41b8335
1 parent 9fe5c51
commit 41b8335
Show file tree

Hide file tree

Showing 2 changed files with 21 additions and 1 deletion.
diff --git a/NewLife.RocketMQ/ClusterClient.cs b/NewLife.RocketMQ/ClusterClient.cs
@@ -99,7 +99,12 @@ protected void EnsureCreate()
                 client.Add(new MqCodec { Timeout = Timeout });
 
                 // 关闭Tcp延迟以合并小包的算法，降低延迟
-                if (client is TcpSession tcp) tcp.NoDelay = true;
+                if (client is TcpSession tcp)
+                {
+                    tcp.SslProtocol = Config.SslProtocol;
+                    tcp.Certificate = Config.Certificate;
+                    tcp.NoDelay = true;
+                }
 
                 try
                 {

diff --git a/NewLife.RocketMQ/MqBase.cs b/NewLife.RocketMQ/MqBase.cs
@@ -1,6 +1,8 @@
 using System.Collections.Concurrent;
 using System.Diagnostics;
 using System.Reflection;
+using System.Security.Authentication;
+using System.Security.Cryptography.X509Certificates;
 using NewLife.Log;
 using NewLife.Net;
 using NewLife.RocketMQ.Protocol;
@@ -53,6 +55,19 @@ public abstract class MqBase : DisposeBase
     /// <summary>序列化类型。默认Json，支持RocketMQ二进制</summary>
     public SerializeType SerializeType { get; set; } = SerializeType.JSON;
 
+    /// <summary>SSL协议。默认None</summary>
+    public SslProtocols SslProtocol { get; set; } = SslProtocols.None;
+
+    /// <summary>X509证书。用于SSL连接时验证证书指纹，可以直接加载pem证书文件，未指定时不验证证书</summary>
+    /// <remarks>
+    /// 可以使用pfx证书文件，也可以使用pem证书文件。
+    /// 服务端必须指定证书。
+    /// </remarks>
+    /// <example>
+    /// var cert = new X509Certificate2("file", "pass");
+    /// </example>
+    public X509Certificate? Certificate { get; set; }
+
     //public Boolean VipChannelEnabled { get; set; } = true;
 
     /// <summary>是否可用</summary>