erlang - 如何使用 ssl 加密构建非阻塞 TCP 服务器

Question

trapexit.org 上的非阻塞 TCP 服务器解释了如何基于 tcp_gen 构建服务器，但我想修改此示例并使其与 ssl 一起使用。现在我完全不知道如何更换

{ok, Ref} = prim_inet:async_accept(Listen_socket, -1)

Answer 1

带有多线程的简单 echo_ssl

-module(echo_ssl).
-compile([export_all]).

main() ->
    application:start(crypto),
    application:start(ssl),
    ssl:seed("TODO random here"),
    {ok, ListenSocket} = ssl:listen(2840, [
        {ssl_imp, new},
        {active, false},
        {verify, 0},
        {mode,binary},
        {cacertfile, "certs/etc/server/cacerts.pem"},
        {certfile, "certs/etc/server/cert.pem"},
        {keyfile, "certs/etc/server/key.pem"}
    ]),
    io:format("ready to accept connections at port 2840 ~p\n", [ListenSocket]),
    server_loop(ListenSocket).

server_loop(ListenSocket) ->
    {ok, Socket} = ssl:transport_accept(ListenSocket),
    io:format("accepted connection from ~p\n", [ssl:peername(Socket)]),
    ssl:ssl_accept(Socket),
    spawn(fun() -> loop(Socket) end),
    server_loop(ListenSocket).

loop(Socket) ->
    io:format("waiting for packet~n"),
    case ssl:recv(Socket, 1000, 2000) of
        {ok, Data} ->
            io:format("received data: ~s~n", [binary_to_list(Data)]),
            Return = ssl:send(Socket, Data),
            io:format("sending ~p~n", [Return]),
            loop(Socket);
        {error, timeout} ->
           loop(Socket);
        Else ->
            io:format("crap ~p~n",[Else])
    end.

Answer 2

不要用任何东西代替它。而是将您的输入和输出连接到 SSL 处理程序。

支出者是对的，SSL 使用 TCP 进行传输。

这里有人似乎已经通过 async TCP 实现了 SSL。