arancini 0.7.5

High-performance BMP collector
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

use anyhow::Result;
use async_nats::{Client, ConnectOptions};
use std::sync::Once;

use crate::config::NatsConfig;

fn ensure_rustls_provider_installed() {
    static ONCE: Once = Once::new();
    ONCE.call_once(|| {
        let _ = rustls::crypto::aws_lc_rs::default_provider().install_default();
    });
}

pub(crate) async fn connect(cfg: &NatsConfig) -> Result<Client> {
    ensure_rustls_provider_installed();

    let mut options = ConnectOptions::new();

    let has_tls_material = cfg.tls_ca_cert_path.is_some()
        || (cfg.tls_client_cert_path.is_some() && cfg.tls_client_key_path.is_some());

    if cfg.tls_first {
        options = options.tls_first();
    } else if cfg.tls_required || has_tls_material {
        options = options.require_tls(true);
    }

    if let Some(path) = &cfg.tls_ca_cert_path {
        options = options.add_root_certificates(path.clone());
    }

    if let (Some(cert), Some(key)) = (&cfg.tls_client_cert_path, &cfg.tls_client_key_path) {
        options = options.add_client_certificate(cert.clone(), key.clone());
    }

    options
        .connect(cfg.server.clone())
        .await
        .map_err(|err| anyhow::anyhow!("failed to connect to NATS at {}: {}", cfg.server, err))
}