Golang如何使用TLS建立安全连接_Golang TLS安全连接实践

package main

import (
    "net/http"
    "log"
)

func main() {
    http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
        w.Write([]byte("Hello, TLS!"))
    })

    // 使用 tls.ListenAndServe
    log.Fatal(http.ListenAndServeTLS(":443", "server.crt", "server.key", nil))
}

config := &tls.Config{
    MinVersion:               tls.VersionTLS12,
    CurvePreferences:         []tls.CurveID{tls.CurveP521, tls.CurveP384, tls.CurveP256},
    PreferServerCipherSuites: true,
    CipherSuites: []uint16{
        tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
        tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
    },
}

server := &http.Server{
    Addr:      ":8443",
    TLSConfig: config,
}
log.Fatal(server.ListenAndServeTLS("server.crt", "server.key"))

tr := &http.Transport{
    TLSClientConfig: &tls.Config{InsecureSkipVerify: true}, // 不推荐生产环境使用
}
client := &http.Client{Transport: tr}
resp, err := client.Get("https://your-secure-site.com")

caCert, err := ioutil.ReadFile("ca.crt")
if err != nil {
    log.Fatal(err)
}
caPool := x509.NewCertPool()
caPool.AppendCertsFromPEM(caCert)

tlsConfig := &tls.Config{RootCAs: caPool}
tr := &http.Transport{TLSClientConfig: tlsConfig}
client := &http.Client{Transport: tr}

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes -subj "/CN=localhost"