forked from jfrog/jfrog-client-go
-
Notifications
You must be signed in to change notification settings - Fork 0
/
clientBuilder.go
92 lines (79 loc) · 2.61 KB
/
clientBuilder.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
package httpclient
import (
"crypto/tls"
"errors"
"net"
"net/http"
"time"
"github.com/cobalt77/jfrog-client-go/auth/cert"
"github.com/cobalt77/jfrog-client-go/utils/errorutils"
)
func ClientBuilder() *httpClientBuilder {
return &httpClientBuilder{}
}
type httpClientBuilder struct {
certificatesDirPath string
clientCertPath string
clientCertKeyPath string
insecureTls bool
}
func (builder *httpClientBuilder) SetCertificatesPath(certificatesPath string) *httpClientBuilder {
builder.certificatesDirPath = certificatesPath
return builder
}
func (builder *httpClientBuilder) SetClientCertPath(certificatePath string) *httpClientBuilder {
builder.clientCertPath = certificatePath
return builder
}
func (builder *httpClientBuilder) SetClientCertKeyPath(certificatePath string) *httpClientBuilder {
builder.clientCertKeyPath = certificatePath
return builder
}
func (builder *httpClientBuilder) SetInsecureTls(insecureTls bool) *httpClientBuilder {
builder.insecureTls = insecureTls
return builder
}
func (builder *httpClientBuilder) AddClientCertToTransport(transport *http.Transport) error {
if builder.clientCertPath != "" {
cert, err := tls.LoadX509KeyPair(builder.clientCertPath, builder.clientCertKeyPath)
if err != nil {
return errorutils.CheckError(errors.New("Failed loading client certificate: " + err.Error()))
}
transport.TLSClientConfig.Certificates = []tls.Certificate{cert}
}
return nil
}
func (builder *httpClientBuilder) Build() (*HttpClient, error) {
if builder.certificatesDirPath == "" {
transport := createDefaultHttpTransport()
transport.TLSClientConfig = &tls.Config{InsecureSkipVerify: builder.insecureTls}
err := builder.AddClientCertToTransport(transport)
if err != nil {
return nil, err
}
return &HttpClient{Client: &http.Client{Transport: transport}}, nil
}
transport, err := cert.GetTransportWithLoadedCert(builder.certificatesDirPath, builder.insecureTls, createDefaultHttpTransport())
if err != nil {
return nil, errorutils.CheckError(errors.New("Failed creating HttpClient: " + err.Error()))
}
err = builder.AddClientCertToTransport(transport)
if err != nil {
return nil, err
}
return &HttpClient{Client: &http.Client{Transport: transport}}, nil
}
func createDefaultHttpTransport() *http.Transport {
return &http.Transport{
Proxy: http.ProxyFromEnvironment,
DialContext: (&net.Dialer{
Timeout: 30 * time.Second,
KeepAlive: 20 * time.Second,
DualStack: true,
}).DialContext,
MaxIdleConns: 100,
IdleConnTimeout: 90 * time.Second,
TLSHandshakeTimeout: 10 * time.Second,
ExpectContinueTimeout: 1 * time.Second,
}
}