Function build_mtls_channel

crates/openshell-tui/src/lib.rs:566–594

Build a gRPC channel using mTLS client certificates.

(name: &str, endpoint: &str)

/// Build a gRPC channel using mTLS client certificates.
async fn build_mtls_channel(name: &str, endpoint: &str) -> Result<Channel> {
    let mtls_dir = gateway_mtls_dir(name)
        .ok_or_else(|| miette::miette!("cannot determine config directory for gateway {name}"))?;

    let ca = std::fs::read(mtls_dir.join("ca.crt"))
        .into_diagnostic()
        .map_err(|_| miette::miette!("missing CA cert for gateway {name}"))?;
    let cert = std::fs::read(mtls_dir.join("tls.crt"))
        .into_diagnostic()
        .map_err(|_| miette::miette!("missing client cert for gateway {name}"))?;
    let key = std::fs::read(mtls_dir.join("tls.key"))
        .into_diagnostic()
        .map_err(|_| miette::miette!("missing client key for gateway {name}"))?;

    let tls_config = ClientTlsConfig::new()
        .ca_certificate(Certificate::from_pem(ca))
        .identity(Identity::from_pem(cert, key));

    Endpoint::from_shared(endpoint.to_string())
        .into_diagnostic()?
        .connect_timeout(Duration::from_secs(10))
        .http2_keep_alive_interval(Duration::from_secs(10))
        .keep_alive_while_idle(true)
        .tls_config(tls_config)
        .into_diagnostic()?
        .connect()
        .await
        .into_diagnostic()
}

/// Resolve the mTLS cert directory for a gateway.
fn gateway_mtls_dir(name: &str) -> Option<PathBuf> {