package mtls

import (
	"crypto/tls"
	"crypto/x509"
	"fmt"
	"log"
	"os"

	"github.com/gorilla/websocket"
)

func loadServerCa() *x509.CertPool {
	// 加载CA证书
	caCert, err := os.ReadFile("ca.crt")
	if err != nil {
		log.Fatal(err)
	}
	caCertPool := x509.NewCertPool()
	caCertPool.AppendCertsFromPEM(caCert)

	return caCertPool
}

func Hello() {
	caCertPool := loadServerCa()

	// 加载客户端的私钥和证书
	clientCert, err := tls.LoadX509KeyPair("client.crt", "client.key")
	if err != nil {
		log.Fatal(err)
	}

	// 设置TLS配置
	tlsConfig := &tls.Config{
		Certificates: []tls.Certificate{clientCert},
		RootCAs:      caCertPool,
	}

	// 连接到WebSocket服务器
	dialer := websocket.DefaultDialer
	dialer.TLSClientConfig = tlsConfig
	conn, _, err := dialer.Dial("wss://localhost:8765", nil)
	if err != nil {
		log.Fatal(err)
	}
	defer conn.Close()

	// 接收消息
	_, message, err := conn.ReadMessage()
	if err != nil {
		log.Fatal(err)
	}
	fmt.Printf("Received: %s\n", message)
}