tool/lxutils
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

忽略私钥

Browse Source
This commit is contained in:
wangjie 2025-07-26 00:00:28 +08:00
parent 488fec2394
commit b1ec70887e
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
lxDb/db.go
View File

@ -79,7 +79,7 @@ func InitDB(env string, conf DbConfig) {
// 如果配置了TLS，则设置TLS连接
if conf.TLS != "" {
// 1. 读取CA证书
caCert, err := ioutil.ReadFile("path/to/ca.pem")
caCert, err := ioutil.ReadFile(conf.TLS)
if err != nil {
panic("读取CA证书失败: " + err.Error())
}
@ -90,17 +90,17 @@ func InitDB(env string, conf DbConfig) {
panic("添加CA证书到池失败")
}
// 3. 加载客户端证书和私钥
cert, err := tls.LoadX509KeyPair("path/to/client-cert.pem", "path/to/client-key.pem")
if err != nil {
panic("加载客户端证书失败: " + err.Error())
}
//// 3. 加载客户端证书和私钥
//cert, err := tls.LoadX509KeyPair("path/to/client-cert.pem", "path/to/client-key.pem")
//if err != nil {
// panic("加载客户端证书失败: " + err.Error())
//}
// 4. 创建TLS配置
tlsConfig := &tls.Config{
RootCAs: caCertPool, // 信任的CA
Certificates: []tls.Certificate{cert}, // 客户端证书
MinVersion: tls.VersionTLS12, // 最小TLS版本
RootCAs: caCertPool, // 信任的CA
//Certificates: []tls.Certificate{cert}, // 客户端证书
MinVersion: tls.VersionTLS12, // 最小TLS版本
}
// 5. 注册自定义TLS配置到MySQL驱动