tls.rs

  let stream = TcpStream::connect((broker.host.as_str(), broker.port)).await?;
  let mut tls_builder: tokio_native_tls::native_tls::TlsConnectorBuilder = tokio_native_tls::native_tls::TlsConnector::builder();
  let cert_bytes = include_bytes!("result/ca_certificate.pem");
  let cert = Certificate::from_pem(cert_bytes).unwrap();
  let s = tls_builder.add_root_certificate(cert)
                .danger_accept_invalid_hostnames(false)
                // .danger_accept_invalid_certs(true)
                .min_protocol_version(Some(tokio_native_tls::native_tls::Protocol::Tlsv12));
  let conn = tokio_native_tls::TlsConnector::from(s.build()?).connect(broker.host.as_str(), stream).await?;