如何配置SSL/TLS在Spring启动与rsocket？

Question

我已经阅读了stackoverflow中的相关问题。然而，答案只告诉如何配置身份验证检查。我需要在spring boot中用rsocket加密所有传输的数据。如何在带有SSL/tls的spring boot中使用tls。在如下所示初始化rsocket客户端时，我找不到任何受支持的方法，尽管我知道rsocket-it本身可以支持SSL/TLS。我发现了一些例子：

        this.rsocketRequester = rsocketRequesterBuilder.setupRoute("sidecar-client")
            .setupData("test_data")
            .rsocketConnector(connector -> connector.acceptor(responder))
            .connectTcp("localhost", 7000)
            .block();

Summary of my question:
1. Does rsocket in springboot support SSL/TLS ?
2. If spring boot support rsocket with SSL/TLS, are there any examples can be referenced

Answer 1

1. springboot中的rsocket支持SSL/TLS吗

是的-您需要像通常一样配置SSL/TLS，而不管是否使用rsocket。

在application.yml中添加以下行：

server:
  port: 8443
  ssl:
    enabled: true
    client-auth: none
    protocol: "TLS"
    key-store: "classpath:certs/local/server.jks"
    key-store-type: "JKS"
    key-store-password: "changeit"
    trust-store: "classpath:certs/trust.jks"
    trust-store-password: "changeit"

spring:
  rsocket:
    server:
      mapping-path: "/"
      transport: websocket

在客户端使用wss而不是ws

const _rSocketClient = function()
{
   return  new RSocketClient({
       setup: {
           // ms btw sending keepalive to server
           keepAlive: 60000,
           // ms timeout if no keepalive response
           lifetime: 180000,
           // format of `data`
           dataMimeType: 'application/json',
           // format of `metadata`
           metadataMimeType: MESSAGE_RSOCKET_COMPOSITE_METADATA.string,
       },
       transport: new RSocketWebSocketClient(
           {
               // Connect as secure websocket
               url : "wss://" + R_SOCKET_HOST + ":" + R_SOCKET_PORT,
               debug: true
           },
           BufferEncoders
       ),
   });
}

我也找不到任何示例，只能自己动手学习。您会发现的大多数RSocket示例都使用RSocketFactory，它现在已被弃用，API不断变化——因此请始终获取最新信息并亲自尝试。

Answer 2

是的，修改你的例子

安全TCP（SSL）

this.rsocketRequester = rsocketRequesterBuilder.setupRoute("sidecar-client")
            .setupData("test_data")
            .rsocketConnector(connector -> connector.acceptor(responder))
            .connect(TcpClientTransport.create(TcpClient.create().secure().host("localhost").port(7000)))
            .block();

或安全WebSocket

this.rsocketRequester = rsocketRequesterBuilder.setupRoute("sidecar-client")
            .setupData("test_data")
            .rsocketConnector(connector -> connector.acceptor(responder))
                  .connectWebSocket(URI.create("https://rsocket-demo.herokuapp.com/rsocket"))
            .block();