tool/lxutils
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

忽略私钥

Browse Source
This commit is contained in:
wangjie 2025-07-26 00:00:28 +08:00
parent 488fec2394
commit b1ec70887e
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
lxDb/db.go
View File

@ -79,7 +79,7 @@ func InitDB(env string, conf DbConfig) {
// 如果配置了TLS，则设置TLS连接 // 如果配置了TLS，则设置TLS连接
if conf.TLS != "" { if conf.TLS != "" {
// 1. 读取CA证书 // 1. 读取CA证书
caCert, err := ioutil.ReadFile("path/to/ca.pem") caCert, err := ioutil.ReadFile(conf.TLS)
if err != nil { if err != nil {
panic("读取CA证书失败: " + err.Error()) panic("读取CA证书失败: " + err.Error())
} }
@ -90,17 +90,17 @@ func InitDB(env string, conf DbConfig) {
panic("添加CA证书到池失败") panic("添加CA证书到池失败")
} }
// 3. 加载客户端证书和私钥 //// 3. 加载客户端证书和私钥
cert, err := tls.LoadX509KeyPair("path/to/client-cert.pem", "path/to/client-key.pem") //cert, err := tls.LoadX509KeyPair("path/to/client-cert.pem", "path/to/client-key.pem")
if err != nil { //if err != nil {
panic("加载客户端证书失败: " + err.Error()) // panic("加载客户端证书失败: " + err.Error())
} //}
// 4. 创建TLS配置 // 4. 创建TLS配置
tlsConfig := &tls.Config{ tlsConfig := &tls.Config{
RootCAs: caCertPool, // 信任的CA RootCAs: caCertPool, // 信任的CA
Certificates: []tls.Certificate{cert}, // 客户端证书 //Certificates: []tls.Certificate{cert}, // 客户端证书
MinVersion: tls.VersionTLS12, // 最小TLS版本 MinVersion: tls.VersionTLS12, // 最小TLS版本
} }
// 5. 注册自定义TLS配置到MySQL驱动 // 5. 注册自定义TLS配置到MySQL驱动