HTTP2 .Net Framework 与 gRPC 的问题

Question

我需要将gRPC用于双向流，其中客户端是.Net Framework项目，由于遗留问题，无法升级到.NET5。

当阅读microsoft留档，我可以看到应该使用WinHttpHandler（https://docs.microsoft.com/en-us/aspnet/core/grpc/netstandard?view=aspnetcore-5.0）。

但是我似乎在使用SSL进行此设置时遇到了问题，有人有什么建议可以解决这个问题吗？

我得到以下错误：

"无效操作异常：GrpcChannel不支持带有非空参数的SslCreentials。GrpcChannel使用HttpClient进行gRPC调用，HttpClient自动从操作系统证书存储中加载根证书。客户端证书应在HttpClient上配置。有关详细信息，请参阅https://aka.ms/aspnet/grpc/certauth。"

我的服务器使用以下设置进行设置：

let cacert = File.ReadAllText(@"ca.crt");
let servercert = File.ReadAllText(@"server.crt");
let serverkey = File.ReadAllText(@"server.key");

let certificatePair = new KeyCertificatePair(servercert, serverkey);
let certList = new System.Collections.Generic.List<KeyCertificatePair>()
    certList.Add(certificatePair)
let server = new Server()
    server.Services.Add(EventSubscriberService.EventSubscriberServiceMethodBinder.BindService(new EventSubscriber()))
    server.Ports.Add(new ServerPort("localhost", 5001,SslServerCredentials(certList,cacert,false))) 
    |> ignore'''

客户端使用这种设置:

let cacert = File.ReadAllText(@"ca.crt");
let clientcert = File.ReadAllText(@"client.crt");
let clientkey = File.ReadAllText(@"client.key");
let ssl = new SslCredentials(cacert, new KeyCertificatePair(clientcert, clientkey))

let channelOptions = GrpcChannelOptions()
channelOptions.HttpHandler <- new WinHttpHandler()    
channelOptions.Credentials <- ssl


let channel = GrpcChannel.ForAddress("http://127.0.0.1:5001",channelOptions)

它是用F#编写的，但类似于这个C#代码，如果引用有助于易读性的话。如何为gRPC启用服务器端SSL？

Answer 1

可能以下内容（粗略草案）可以起作用：

open System.Net.Http
open Grpc.Net.Client
open System.Security.Cryptography.X509Certificates

let clientCert = new X509Certificate() // create according to your needs
let handler = new HttpClientHandler()
handler.ClientCertificates.Add(clientCert) |> ignore
// insecure, check your custom server cert
handler.ServerCertificateCustomValidationCallback <- fun msg cert chain e -> true
let client = new HttpClient(handler)
let channelOptions = GrpcChannelOptions(HttpClient = client)
let channel = GrpcChannel.ForAddress("http://127.0.0.1:5001", channelOptions)