Adds protobuf-compiler to workflow

.github/workflows/build_test.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Install Linux Packages
         run: |
           sudo apt-get update -y
-          sudo apt-get install libssl-dev openssl -y
+          sudo apt-get install libssl-dev openssl protobuf-compiler -y
 
       - uses: actions/checkout@v4
 

.github/workflows/clippy_test.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Install Linux Packages
         run: |
           sudo apt-get update -y
-          sudo apt-get install libssl-dev openssl -y
+          sudo apt-get install libssl-dev openssl protobuf-compiler -y
 
       - uses: actions/checkout@v4
 

Cargo.toml

@@ -75,7 +75,7 @@ jemallocator = "0.5"
 quinn = "0.10.2"
 quinn-proto = "0.10.5"
 rustls = { version = "0.21.7", default-features = false, features = ["quic"] }
-rcgen = "0.13.1"
+rcgen = "0.9.3"
 
 solana-lite-rpc-services = {path = "services", version="0.2.4"}
 solana-lite-rpc-core = {path = "core", version="0.2.4"}

quic-forward-proxy-integration-test/tests/quic_proxy_tpu_integrationtest.rs

@@ -19,16 +19,16 @@ use solana_streamer::nonblocking::quic::{ConnectionPeerType, SpawnNonBlockingSer
 use solana_streamer::packet::PacketBatch;
 use solana_streamer::quic::StreamStats;
 use solana_streamer::streamer::StakedNodes;
-use solana_streamer::tls_certificates::new_self_signed_tls_certificate;
 use std::collections::{HashMap, HashSet};
-use std::net::{IpAddr, Ipv4Addr, SocketAddr, UdpSocket};
+use std::net::{Ipv4Addr, SocketAddr, UdpSocket};
 
 use itertools::Itertools;
 use std::str::FromStr;
 use std::sync::atomic::{AtomicBool, Ordering};
 use std::sync::{Arc, RwLock};
 use std::thread;
 use std::time::{Duration, Instant};
+use solana_streamer::tls_certificates::new_dummy_x509_certificate;
 use tokio::runtime::Builder;
 
 use tokio::task::{yield_now, JoinHandle};
@@ -423,20 +423,19 @@ async fn solana_quic_streamer_start() {
     // keypair to derive the server tls certificate
     let keypair = Keypair::new();
     // gossip_host is used in the server certificate
-    let gossip_host = "127.0.0.1".parse().unwrap();
     let SpawnNonBlockingServerResult { stats, thread, .. } =
         solana_streamer::nonblocking::quic::spawn_server(
             "test-quic-server",
             sock.try_clone().unwrap(),
             &keypair,
-            gossip_host,
             sender,
             exit.clone(),
             1,
             staked_nodes,
             10,
             10,
             9999, // max_streams_per_ms
+            10,
             Duration::from_millis(1000),
             Duration::from_millis(1000),
         )
@@ -467,11 +466,7 @@ async fn start_literpc_client_direct_mode(
     // (String, Vec<u8>) (signature, transaction)
     let (sender, _) = tokio::sync::broadcast::channel(MAXIMUM_TRANSACTIONS_IN_QUEUE);
     let broadcast_sender = Arc::new(sender);
-    let (certificate, key) = new_self_signed_tls_certificate(
-        literpc_validator_identity.as_ref(),
-        IpAddr::V4(Ipv4Addr::new(0, 0, 0, 0)),
-    )
-    .expect("Failed to initialize QUIC connection certificates");
+    let (certificate, key) = new_dummy_x509_certificate(literpc_validator_identity.as_ref());
 
     let tpu_connection_manager =
         TpuConnectionManager::new(certificate, key, fanout_slots as usize).await;
@@ -568,11 +563,7 @@ async fn start_literpc_client_proxy_mode(
     // (String, Vec<u8>) (signature, transaction)
     let (sender, _) = tokio::sync::broadcast::channel(MAXIMUM_TRANSACTIONS_IN_QUEUE);
     let broadcast_sender = Arc::new(sender);
-    let (certificate, key) = new_self_signed_tls_certificate(
-        validator_identity.as_ref(),
-        IpAddr::V4(Ipv4Addr::new(0, 0, 0, 0)),
-    )
-    .expect("Failed to initialize QUIC connection certificates");
+    let (certificate, key) = new_dummy_x509_certificate(validator_identity.as_ref());
 
     let quic_proxy_connection_manager =
         QuicProxyConnectionManager::new(certificate, key, forward_proxy_address).await;
@@ -707,21 +698,20 @@ impl SolanaQuicStreamer {
         let exit = Arc::new(AtomicBool::new(false));
         // keypair to derive the server tls certificate
         let keypair = Keypair::new();
-        // gossip_host is used in the server certificate
-        let gossip_host = "127.0.0.1".parse().unwrap();
+
         let SpawnNonBlockingServerResult { stats, thread, .. } =
             solana_streamer::nonblocking::quic::spawn_server(
                 "test-quic-server",
                 udp_socket.try_clone().unwrap(),
                 &keypair,
-                gossip_host,
                 sender,
                 exit.clone(),
                 MAX_QUIC_CONNECTIONS_PER_PEER,
                 staked_nodes,
                 10,
                 10,
                 9999, // max_streams_per_ms
+                10,
                 Duration::from_millis(1000),
                 Duration::from_millis(1000),
             )

quic-forward-proxy/src/outbound/tx_forward.rs

@@ -14,7 +14,7 @@ use quinn::{
 use solana_lite_rpc_core::network_utils::apply_gso_workaround;
 use solana_sdk::quic::QUIC_MAX_TIMEOUT;
 use solana_streamer::nonblocking::quic::ALPN_TPU_PROTOCOL_ID;
-use solana_streamer::tls_certificates::new_self_signed_tls_certificate;
+use solana_streamer::tls_certificates::new_dummy_x509_certificate;
 use std::collections::HashMap;
 use std::net::{IpAddr, Ipv4Addr, SocketAddr};
 use std::sync::atomic::{AtomicBool, Ordering};
@@ -267,11 +267,8 @@ async fn new_endpoint_with_validator_identity(validator_identity: ValidatorIdent
         validator_identity
     );
     // the counterpart of this function is get_remote_pubkey+get_pubkey_from_tls_certificate
-    let (certificate, key) = new_self_signed_tls_certificate(
-        &validator_identity.get_keypair_for_tls(),
-        IpAddr::V4(Ipv4Addr::new(0, 0, 0, 0)),
-    )
-    .expect("Failed to initialize QUIC connection certificates");
+    let (certificate, key) =
+        new_dummy_x509_certificate(validator_identity.get_keypair_for_tls().as_ref());
 
     create_tpu_client_endpoint(certificate, key)
 }