rumqttc: Enable native tls TlsConnector support.

rumqttc/CHANGELOG.md

@@ -21,6 +21,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * use `Framed` to encode/decode MQTT packets.
 * use `Login` to store credentials
 * Made `DisconnectProperties` struct public.
+* Accept `native_tls::TlsConnectorBuilder` as input of `Transport::tls_with_config`.
 
 ### Deprecated
 

rumqttc/Cargo.toml

@@ -63,6 +63,11 @@ name = "tls"
 path = "examples/tls.rs"
 required-features = ["use-rustls"]
 
+[[example]]
+name = "tls_native"
+path = "examples/tls_native.rs"
+required-features = ["use-native-tls"]
+
 [[example]]
 name = "tls2"
 path = "examples/tls2.rs"

rumqttc/examples/tls.rs

@@ -1,4 +1,4 @@
-//! Example of how to configure rumqttd to connect to a server using TLS and authentication.
+//! Example of how to configure rumqttc to connect to a server using TLS and authentication.
 use std::error::Error;
 
 use rumqttc::{AsyncClient, Event, Incoming, MqttOptions, Transport};

rumqttc/examples/tls_native.rs

@@ -0,0 +1,40 @@
+//! Example of how to configure rumqttc to connect to a server using TLS and authentication.
+use std::error::Error;
+
+use rumqttc::{AsyncClient, Event, Incoming, MqttOptions, Transport};
+use tokio_native_tls::native_tls;
+
+#[tokio::main(flavor = "current_thread")]
+async fn main() -> Result<(), Box<dyn Error>> {
+    pretty_env_logger::init();
+    color_backtrace::install();
+
+    let mut mqttoptions = MqttOptions::new("test-1", "test.mosquitto.org", 8883);
+    mqttoptions.set_keep_alive(std::time::Duration::from_secs(5));
+
+    // Use native-tls to load root certificates from the operating system.
+    let mut builder = native_tls::TlsConnector::builder();
+    let pem = include_bytes!("native-tls-cert.pem");
+    let cert = native_tls::Certificate::from_pem(pem).unwrap();
+    builder.add_root_certificate(cert);
+
+    mqttoptions.set_transport(Transport::tls_with_config(builder.into()));
+
+    let (_client, mut eventloop) = AsyncClient::new(mqttoptions, 10);
+
+    loop {
+        match eventloop.poll().await {
+            Ok(Event::Incoming(Incoming::Publish(p))) => {
+                println!("Topic: {}, Payload: {:?}", p.topic, p.payload);
+            }
+            Ok(Event::Incoming(i)) => {
+                println!("Incoming = {i:?}");
+            }
+            Ok(Event::Outgoing(o)) => println!("Outgoing = {o:?}"),
+            Err(e) => {
+                println!("Error = {e:?}");
+                return Ok(());
+            }
+        }
+    }
+}

rumqttc/src/lib.rs

@@ -100,7 +100,7 @@ extern crate log;
 
 use std::fmt::{self, Debug, Formatter};
 
-#[cfg(any(feature = "use-rustls", feature = "websocket"))]
+#[cfg(any(feature = "use-rustls",feature = "use-native-tls", feature = "websocket"))]
 use std::sync::Arc;
 
 use std::time::Duration;
@@ -149,6 +149,10 @@ pub use tls::Error as TlsError;
 pub use tokio_rustls;
 #[cfg(feature = "use-rustls")]
 use tokio_rustls::rustls::{ClientConfig, RootCertStore};
+#[cfg(feature = "use-native-tls")]
+pub use tokio_native_tls;
+#[cfg(feature = "use-native-tls")]
+use tokio_native_tls::native_tls::TlsConnectorBuilder;
 
 #[cfg(feature = "proxy")]
 pub use proxy::{Proxy, ProxyAuth, ProxyType};
@@ -315,7 +319,7 @@ impl Transport {
 }
 
 /// TLS configuration method
-#[derive(Clone, Debug)]
+#[derive(Clone)]
 #[cfg(any(feature = "use-rustls", feature = "use-native-tls"))]
 pub enum TlsConfiguration {
     #[cfg(feature = "use-rustls")]
@@ -339,7 +343,11 @@ pub enum TlsConfiguration {
     /// Injected rustls ClientConfig for TLS, to allow more customisation.
     Rustls(Arc<ClientConfig>),
     #[cfg(feature = "use-native-tls")]
+    /// Use default native-tls configuration
     Native,
+    #[cfg(feature = "use-native-tls")]
+    /// Injected native-tls TlsConnectorBuilder for TLS, to allow more customisation.
+    NativeBuilder(Arc<TlsConnectorBuilder>),
 }
 
 #[cfg(feature = "use-rustls")]
@@ -364,6 +372,13 @@ impl From<ClientConfig> for TlsConfiguration {
     }
 }
 
+#[cfg(feature = "use-native-tls")]
+impl From<TlsConnectorBuilder> for TlsConfiguration {
+    fn from(builder: TlsConnectorBuilder) -> Self {
+        TlsConfiguration::NativeBuilder(Arc::new(builder))
+    }
+}
+
 /// Provides a way to configure low level network connection configurations
 #[derive(Clone, Default)]
 pub struct NetworkOptions {

rumqttc/src/tls.rs

@@ -155,6 +155,7 @@ pub async fn native_tls_connector(
             connector_builder.build()?
         }
         TlsConfiguration::Native => native_tls::TlsConnector::new()?,
+        TlsConfiguration::NativeBuilder(builder) => builder.build()?,
         #[allow(unreachable_patterns)]
         _ => unreachable!("This cannot be called for other TLS backends than Native TLS"),
     };
@@ -176,7 +177,7 @@ pub async fn tls_connect(
             Box::new(connector.connect(domain, tcp).await?)
         }
         #[cfg(feature = "use-native-tls")]
-        TlsConfiguration::Native | TlsConfiguration::SimpleNative { .. } => {
+        TlsConfiguration::Native | TlsConfiguration::NativeBuilder(_) | TlsConfiguration::SimpleNative { .. } => {
             let connector = native_tls_connector(tls_config).await?;
             Box::new(connector.connect(addr, tcp).await?)
         }