长安链源码分析启动（6）

  //定义grpc服务的参数选项  var opts []grpc.ServerOption  //是否启动了监听配置，如果启动了，加入监听连接器	if localconf.ChainMakerConfig.MonitorConfig.Enabled {		opts = []grpc.ServerOption{			grpc_middleware.WithUnaryServerChain(				RecoveryInterceptor,				LoggingInterceptor,				MonitorInterceptor, // 监听拦截器				BlackListInterceptor(),				RateLimitInterceptor(),			),			grpc_middleware.WithStreamServerChain(				BlackListStreamInterceptor(),			),		}	} else {		opts = []grpc.ServerOption{			grpc_middleware.WithUnaryServerChain(				RecoveryInterceptor,				LoggingInterceptor,				BlackListInterceptor(),				RateLimitInterceptor(),			),			grpc_middleware.WithStreamServerChain(				BlackListStreamInterceptor(),			),		}	}    //如果认证类型是PermissionedWithKey、Public	if strings.ToLower(localconf.ChainMakerConfig.AuthType) == protocol.PermissionedWithKey ||		strings.ToLower(localconf.ChainMakerConfig.AuthType) == protocol.Public {    //确保tls模式为  disable		if localconf.ChainMakerConfig.RpcConfig.TLSConfig.Mode != TLS_MODE_DISABLE {			localconf.ChainMakerConfig.RpcConfig.TLSConfig.Mode = TLS_MODE_DISABLE			log.Infof("the tls mode has been automatically set to [disable] according to the authType:[%s]",				localconf.ChainMakerConfig.AuthType)		}	}
   //如果tls模式不是disable	if localconf.ChainMakerConfig.RpcConfig.TLSConfig.Mode != TLS_MODE_DISABLE {     //获取链配置		chainConfs, err := chainMakerServer.GetAllChainConf()		if err != nil {			return nil, fmt.Errorf("get all chain conf failed, %s", err)		}
		var caCerts []string    //遍历链配置		for _, chainConf := range chainConfs {       //遍历TrustRoots			for _, orgRoot := range chainConf.ChainConfig().TrustRoots {				caCerts = append(caCerts, orgRoot.Root...)			}
		}
    //创建ca服务器		tlsRPCServer := ca.CAServer{			CaCerts:  caCerts,			CertFile: localconf.ChainMakerConfig.RpcConfig.TLSConfig.CertFile,			KeyFile:  localconf.ChainMakerConfig.RpcConfig.TLSConfig.PrivKeyFile,			Logger:   log,		}
    //如果是双向的，设置checkClientAuth为true		checkClientAuth := false		if localconf.ChainMakerConfig.RpcConfig.TLSConfig.Mode == TLS_MODE_TWOWAY {			checkClientAuth = true			log.Infof("need check client auth")		}
    //获取所有的AccessControlProvider		acs, err := chainMakerServer.GetAllAC()		if err != nil {			log.Errorf("get all AccessControlProvider failed, %s", err.Error())			return nil, err		}
		customVerify := ca.CustomVerify{			VerifyPeerCertificate:   createVerifyPeerCertificateFunc(acs),			GMVerifyPeerCertificate: createGMVerifyPeerCertificateFunc(acs),		}
		//c, err := tlsRPCServer.GetCredentialsByCA(checkClientAuth)    //获取认证信息		c, err := tlsRPCServer.GetCredentialsByCA(checkClientAuth, customVerify)		if err != nil {			log.Errorf("new gRPC failed, GetTLSCredentialsByCA err: %v", err)			return nil, err		}
		opts = append(opts, grpc.Creds(*c))	}   //设置一些rpc参数	opts = append(opts, grpc.MaxSendMsgSize(localconf.ChainMakerConfig.RpcConfig.MaxSendMsgSize))	opts = append(opts, grpc.MaxRecvMsgSize(localconf.ChainMakerConfig.RpcConfig.MaxRecvMsgSize))
	//params := grpc.KeepaliveParams(keepalive.ServerParameters{	//	Time:    10 * time.Second,	//	Timeout: 10 * time.Second,	//})	//opts = append(opts, params)   //创建grpc服务器	server := grpc.NewServer(opts...)