sockets - Rust 非阻塞 openssl 流

Question

尝试创建一个非阻塞 ssl 流:

use openssl::ssl::{SslMethod, SslConnector};
use std::io::{Read, Write};
use std::net::TcpStream;

let connector = SslConnector::builder(SslMethod::tls()).unwrap().build();

let stream = TcpStream::connect("google.com:443").unwrap();
stream.set_nonblocking(true);
let mut stream = connector.connect("google.com", stream).unwrap();

但是我得到了这个错误:

thread '<unnamed>' panicked at 'called `Result::unwrap()` on an `Err` value:WouldBlock(MidHandshakeSslStream { stream: SslStream { stream: TcpStream { addr:V4(10.137.0.17:55628), peer: V4(172.217.21.78:443), fd: 3 }, ssl: Ssl { state: "SSLv3/TLSwrite client hello", verify_result: X509VerifyResult { code: 0, error: "ok" } } }, error: Error { code: ErrorCode(2), cause: Some(Io(Os { code: 11, kind: WouldBlock, message: "Resource temporarily unavailable" })) } })', src/libcore/result.rs:1051:5 

如何创建非阻塞 ssl 流？

Answer 1

tokio 项目有 tokio-openssl 箱子。您可能需要拥抱整个 async/await 机制并使用该 crate 来执行非阻塞 openssl:

//# openssl = "0.10.25"
//# tokio = "0.2.0-alpha.6"
//# tokio-net = "0.2.0-alpha.6"
//# tokio-openssl = "0.4.0-alpha.6"
use openssl::ssl::{SslMethod, SslConnector};
use tokio::net::TcpStream;
use tokio::prelude::*;
use tokio_net::driver::Handle;
use tokio_openssl::connect;
use std::error::Error;

#[tokio::main]
async fn main() -> Result<(), Box<dyn Error>> {
    let sslconf = SslConnector::builder(SslMethod::tls())?
        .build()
        .configure()?;
    // The following 3 lines are equivalent to:
    //     let stream = TcpStream::connect("google.com:443").await?;
    // It's just going to show that the socket is indeed nonblocking.
    let stream = std::net::TcpStream::connect("google.com:443")?;
    stream.set_nonblocking(true)?;
    let stream = TcpStream::from_std(stream, &Handle::default())?;
    let mut stream = connect(sslconf, "google.com", stream).await?;

    stream.write_all(b"GET / HTTP/1.0\r\n\r\n").await?;
    let mut res = vec![];
    stream.read_to_end(&mut res).await?;
    dbg!(String::from_utf8_lossy(&res));

    Ok(())
}

当然，这也意味着您现在必须使用 beta/nightly channel 。它可能适合也可能不适合您的项目。