feat: create custom trustmanager for gRPC connection

Author: bevzzz

pom.xml

@@ -72,6 +72,7 @@
     <grpc-netty-shaded.version>1.68.2</grpc-netty-shaded.version>
     <grpc-protobuf.version>1.70.0</grpc-protobuf.version>
     <grpc-stub.version>1.68.2</grpc-stub.version>
+    <grpc-netty.version>1.73.0</grpc-netty.version>
     <annotations-api.version>6.0.53</annotations-api.version>
   </properties>
 
@@ -97,6 +98,11 @@
       <artifactId>grpc-protobuf</artifactId>
       <version>${grpc-protobuf.version}</version>
     </dependency>
+    <dependency>
+      <groupId>io.grpc</groupId>
+      <artifactId>grpc-netty</artifactId>
+      <version>${grpc-netty.version}</version>
+    </dependency>
     <dependency>
       <groupId>io.grpc</groupId>
       <artifactId>grpc-stub</artifactId>

src/it/java/io/weaviate/integration/DefaultRestTransportITest.java

@@ -25,7 +25,7 @@ public class DefaultRestTransportITest {
   private TrustManagerFactory tmf;
 
   @Before
-  public void startMockServer() throws IOException {
+  public void setUp() throws IOException {
     // MockServer does not verify exclusive ownership of the port
     // and using any well-known port like 8080 will produce flaky
     // test results with fairly confusing errors, like:
@@ -86,7 +86,7 @@ public void testCustomTrustStore_async() throws IOException, ExecutionException,
   }
 
   @After
-  public void stopMockServer() throws IOException {
+  public void tearDown() throws IOException {
     mockServer.stop();
     transport.close();
   }

src/main/java/io/weaviate/client6/v1/api/Config.java

@@ -184,7 +184,7 @@ public Custom httpHost(String httpHost) {
     }
 
     public Custom httpPort(int port) {
-      this.grpcPort = port;
+      this.httpPort = port;
       return this;
     }
 

src/main/java/io/weaviate/client6/v1/internal/TransportOptions.java

@@ -22,7 +22,7 @@ protected TransportOptions(String scheme, String host, int port, H headers, Toke
   }
 
   public boolean isSecure() {
-    return scheme == "https";
+    return scheme.equals("https");
   }
 
   public String scheme() {

src/main/java/io/weaviate/client6/v1/internal/grpc/DefaultGrpcTransport.java

@@ -3,13 +3,17 @@
 import java.io.IOException;
 import java.util.concurrent.CompletableFuture;
 
+import javax.net.ssl.SSLException;
+
 import com.google.common.util.concurrent.FutureCallback;
 import com.google.common.util.concurrent.Futures;
 import com.google.common.util.concurrent.ListenableFuture;
 
 import io.grpc.ManagedChannel;
-import io.grpc.ManagedChannelBuilder;
+import io.grpc.netty.GrpcSslContexts;
+import io.grpc.netty.NettyChannelBuilder;
 import io.grpc.stub.MetadataUtils;
+import io.netty.handler.ssl.SslContext;
 import io.weaviate.client6.v1.internal.grpc.protocol.WeaviateGrpc;
 import io.weaviate.client6.v1.internal.grpc.protocol.WeaviateGrpc.WeaviateBlockingStub;
 import io.weaviate.client6.v1.internal.grpc.protocol.WeaviateGrpc.WeaviateFutureStub;
@@ -80,15 +84,29 @@ public void onFailure(Throwable t) {
   }
 
   private static ManagedChannel buildChannel(GrpcChannelOptions transportOptions) {
-    var channel = ManagedChannelBuilder.forAddress(transportOptions.host(), transportOptions.port());
+    var channel = NettyChannelBuilder.forAddress(transportOptions.host(), transportOptions.port());
 
     if (transportOptions.isSecure()) {
       channel.useTransportSecurity();
     } else {
       channel.usePlaintext();
     }
 
+    if (transportOptions.trustManagerFactory() != null) {
+      SslContext sslCtx;
+      try {
+        sslCtx = GrpcSslContexts.forClient()
+            .trustManager(transportOptions.trustManagerFactory())
+            .build();
+      } catch (SSLException e) {
+        // todo: rethrow as WeaviateConnectionException
+        throw new RuntimeException("create grpc transport", e);
+      }
+      channel.sslContext(sslCtx);
+    }
+
     channel.intercept(MetadataUtils.newAttachHeadersInterceptor(transportOptions.headers()));
+
     return channel.build();
   }