Custom ALPN protocol about hyper-rustls HOT 3 CLOSED

async fn connect() -> Result<(), Box<dyn std::error::Error>> {
    let ca = load_ca()?;
    let user_cert = load_user_cert()?;
    let user_key = load_private_key()?;

    let mut roots = RootCertStore::empty();

    roots.add_parsable_certificates(&ca);

    let mut tls = ClientConfig::builder()
        .with_safe_defaults()
        .with_root_certificates(roots)
        .with_client_auth_cert(vec![user_cert], user_key)?;

    let encoded_cluster = hex::encode("teleport.carsonanderson.net");

    // Order here matters
    tls.alpn_protocols
        .push(format!("teleport-auth@{}.teleport.cluster.local", encoded_cluster).into());
    tls.alpn_protocols.push("h2".into());

    let stream = tokio::net::TcpStream::connect("teleport.carsonanderson.net:443").await?;

    let connector = TlsConnector::from(Arc::new(tls));

    // being presented the auth server cert which is teleport.cluster.local
    let domain = tokio_rustls::rustls::ServerName::try_from("teleport.cluster.local")?;
    let stream = connector.connect(domain, stream).await?;
    let (sender, conn) = hyper::client::conn::Builder::new()
        .http2_only(true)
        .handshake(stream)
        .await?;
    tokio::spawn(async {
        if let Err(err) = conn.await {
            eprintln!("error servicing connection: {err}");
        }
    });
    let svc = ServiceBuilder::new().buffer(256).service(sender);

    let mut client = teleport::auth::auth_service_client::AuthServiceClient::with_origin(
        svc,
        Uri::from_static("https://teleport.carsonanderson.net"),
    );
    let users = client
        .get_users(tonic::Request::new(teleport::auth::GetUsersRequest {
            with_secrets: false,
        }))
        .await?;
    let mut users = users.into_inner();
    while let Some(user) = users.message().await? {
        println!("{}", user.metadata.unwrap().name);
    }

    Ok(())
}