123 lines
2.6 KiB
Go
123 lines
2.6 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"crypto/ecdsa"
|
|
"crypto/elliptic"
|
|
"crypto/rand"
|
|
"crypto/tls"
|
|
"crypto/x509"
|
|
"crypto/x509/pkix"
|
|
"encoding/pem"
|
|
"math/big"
|
|
"net"
|
|
"sync"
|
|
"time"
|
|
|
|
quic "github.com/quic-go/quic-go"
|
|
"github.com/rs/zerolog/log"
|
|
)
|
|
|
|
type quicConn struct {
|
|
quic.Connection
|
|
quic.Stream
|
|
}
|
|
|
|
func runQuic(wg *sync.WaitGroup) {
|
|
if wg != nil {
|
|
defer wg.Done()
|
|
}
|
|
|
|
udpConn, err := net.ListenUDP("udp4", &net.UDPAddr{Port: config.Port})
|
|
if err != nil {
|
|
log.Panic().Err(err).Msg("Failed to listen UDP")
|
|
}
|
|
defer udpConn.Close()
|
|
|
|
tlsConf, err := generateTLSConfig()
|
|
if err != nil {
|
|
log.Panic().Err(err).Msg("Failed to generate TLS config")
|
|
}
|
|
|
|
ln, err := quic.Listen(udpConn, tlsConf, nil)
|
|
if err != nil {
|
|
log.Panic().Err(err).Msg("Failed to listen QUIC")
|
|
}
|
|
log.Info().Int("port", config.Port).Msg("Listening for QUIC connections")
|
|
|
|
for {
|
|
conn, err := ln.Accept(context.Background())
|
|
if err != nil {
|
|
log.Err(err).Msg("Error accepting QUIC connection")
|
|
continue
|
|
}
|
|
|
|
go handleQuicRequest(conn)
|
|
}
|
|
}
|
|
|
|
func handleQuicRequest(conn quic.Connection) {
|
|
defer conn.CloseWithError(0, "Closing connection")
|
|
|
|
ctx, cancel := context.WithTimeout(context.Background(), time.Second*10)
|
|
defer cancel()
|
|
|
|
stream, err := conn.AcceptStream(ctx)
|
|
if err != nil {
|
|
log.Err(err).Msg("Error accepting stream")
|
|
return
|
|
}
|
|
|
|
handleRequest(quicConn{
|
|
Connection: conn,
|
|
Stream: stream,
|
|
})
|
|
}
|
|
|
|
func generateTLSConfig() (*tls.Config, error) {
|
|
// 生成私钥
|
|
priv, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// 创建证书模板
|
|
template := x509.Certificate{
|
|
SerialNumber: big.NewInt(1),
|
|
Subject: pkix.Name{
|
|
Organization: []string{"Example Org"},
|
|
},
|
|
NotBefore: time.Now(),
|
|
NotAfter: time.Now().Add(365 * 24 * time.Hour), // 有效期 1 年
|
|
|
|
KeyUsage: x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
|
|
ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
|
|
BasicConstraintsValid: true,
|
|
}
|
|
|
|
// 自签名证书
|
|
certDER, err := x509.CreateCertificate(rand.Reader, &template, &template, &priv.PublicKey, priv)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// 编码证书和私钥
|
|
certPEM := pem.EncodeToMemory(&pem.Block{Type: "CERTIFICATE", Bytes: certDER})
|
|
keyPEM, err := x509.MarshalECPrivateKey(priv)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
keyPEMBlock := pem.EncodeToMemory(&pem.Block{Type: "EC PRIVATE KEY", Bytes: keyPEM})
|
|
|
|
// 加载到 tls.Certificate
|
|
cert, err := tls.X509KeyPair(certPEM, keyPEMBlock)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
// 返回 tls.Config
|
|
return &tls.Config{
|
|
Certificates: []tls.Certificate{cert},
|
|
}, nil
|
|
}
|