feat/mtls-support-cert: config support

main.go

@@ -321,13 +321,8 @@ func main() {
 	}
 	var opt websocket.ClientOption
 	if tlsPrivateKey != "" {
-		tlsConfig, err := websocket.LoadClientCertificate(tlsPrivateKey)
+		opt = websocket.WithTLSConfig(tlsPrivateKey)
-		if err != nil {
-			logger.Fatal("Failed to load client certificate: %v", err)
 	}
-		opt = websocket.WithTLSConfig(tlsConfig)
-	}
-
 	// Create a new client
 	client, err := websocket.NewClient(
 		id,     // CLI arg takes precedence

websocket/client.go

@@ -25,8 +25,6 @@ type Client struct {
 	handlers          map[string]MessageHandler
 	done              chan struct{}
 	handlersMux       sync.RWMutex
-	tlsConfig   *tls.Config
-
 	reconnectInterval time.Duration
 	isConnected       bool
 	reconnectMux      sync.RWMutex
@@ -45,9 +43,9 @@ func WithBaseURL(url string) ClientOption {
 	}
 }
 
-func WithTLSConfig(tlsConfig *tls.Config) ClientOption {
+func WithTLSConfig(tlsClientCertPath string) ClientOption {
 	return func(c *Client) {
-		c.tlsConfig = tlsConfig
+		c.config.TlsClientCert = tlsClientCertPath
 	}
 }
 
@@ -73,9 +71,14 @@ func NewClient(newtID, secret string, endpoint string, opts ...ClientOption) (*C
 	}
 
 	// Apply options before loading config
+	if opts != nil {
 		for _, opt := range opts {
+			if opt == nil {
+				continue
+			}
 			opt(client)
 		}
+	}
 
 	// Load existing config if available
 	if err := client.loadConfig(); err != nil {
@@ -187,10 +190,13 @@ func (c *Client) getToken() (string, error) {
 
 		// Make the request
 		client := &http.Client{}
-		if c.tlsConfig != nil {
+		if c.config.TlsClientCert != "" {
-			logger.Info("Adding tls to req")
+			tlsConfig, err := LoadClientCertificate(c.config.TlsClientCert)
+			if err != nil {
+				return "", fmt.Errorf("failed to load certificate %s: %w", c.config.TlsClientCert, err)
+			}
 			client.Transport = &http.Transport{
-				TLSClientConfig: c.tlsConfig,
+				TLSClientConfig: tlsConfig,
 			}
 		}
 		resp, err := client.Do(req)
@@ -236,9 +242,13 @@ func (c *Client) getToken() (string, error) {
 
 	// Make the request
 	client := &http.Client{}
-	if c.tlsConfig != nil {
+	if c.config.TlsClientCert != "" {
+		tlsConfig, err := LoadClientCertificate(c.config.TlsClientCert)
+		if err != nil {
+			return "", fmt.Errorf("failed to load certificate %s: %w", c.config.TlsClientCert, err)
+		}
 		client.Transport = &http.Transport{
-			TLSClientConfig: c.tlsConfig,
+			TLSClientConfig: tlsConfig,
 		}
 	}
 	resp, err := client.Do(req)
@@ -317,8 +327,13 @@ func (c *Client) establishConnection() error {
 
 	// Connect to WebSocket
 	dialer := websocket.DefaultDialer
-	if c.tlsConfig != nil {
+	if c.config.TlsClientCert != "" {
-		dialer.TLSClientConfig = c.tlsConfig
+		logger.Info("Adding tls to req")
+		tlsConfig, err := LoadClientCertificate(c.config.TlsClientCert)
+		if err != nil {
+			return fmt.Errorf("failed to load certificate %s: %w", c.config.TlsClientCert, err)
+		}
+		dialer.TLSClientConfig = tlsConfig
 	}
 	conn, _, err := dialer.Dial(u.String(), nil)
 	if err != nil {
@@ -381,6 +396,7 @@ func (c *Client) setConnected(status bool) {
 
 // LoadClientCertificate Helper method to load client certificates
 func LoadClientCertificate(p12Path string) (*tls.Config, error) {
+	logger.Info("Loading tls-client-cert %s", p12Path)
 	// Read the PKCS12 file
 	p12Data, err := os.ReadFile(p12Path)
 	if err != nil {

websocket/config.go

@@ -54,6 +54,13 @@ func (c *Client) loadConfig() error {
 	if c.config.Secret == "" {
 		c.config.Secret = config.Secret
 	}
+	if c.config.TlsClientCert == "" {
+		c.config.TlsClientCert = config.TlsClientCert
+	}
+	if c.config.Endpoint == "" {
+		c.config.Endpoint = config.Endpoint
+		c.baseURL = config.Endpoint
+	}
 	if c.config.Endpoint == "" {
 		c.config.Endpoint = config.Endpoint
 		c.baseURL = config.Endpoint

websocket/types.go

@@ -5,6 +5,7 @@ type Config struct {
 	Secret        string `json:"secret"`
 	Token         string `json:"token"`
 	Endpoint      string `json:"endpoint"`
+	TlsClientCert string `json:"tlsClientCert"`
 }
 
 type TokenResponse struct {