英文:
SSL options in gocql
问题
在我的Cassandra配置中，我已经启用了用户身份验证，并通过SSL连接cqlsh。
我在使用gocql时遇到了问题，以下是我的代码：
cluster := gocql.NewCluster("127.0.0.1")
cluster.Authenticator = gocql.PasswordAuthenticator{
Username: "myuser",
Password: "mypassword",
}
cluster.SslOpts = &gocql.SslOptions {
CertPath: "/path/to/cert.pem",
}
当我尝试连接时，出现以下错误：
gocql: unable to create session: connectionpool: unable to load X509 key pair: open : no such file or directory
在Python中，我可以这样做：
from cassandra.cluster import Cluster
from cassandra.auth import PlainTextAuthProvider
USER = 'username'
PASS = 'password'
ssl_opts = {'ca_certs': '/path/to/cert.pem',
'ssl_version': PROTOCOL_TLSv1
}
credentials = PlainTextAuthProvider(username=USER, password=PASS)
# define host, port, cqlsh protocaol version
cluster = Cluster(contact_points=HOST, protocol_version=CQLSH_PROTOCOL_VERSION, auth_provider=credentials, port=CASSANDRA_PORT)
我查看了gocql和TLS文档这里和这里，但我不确定如何设置ssl选项。
英文:
In my Cassandra config I have enabled user authentication and connect with cqlsh over ssl.
I'm having trouble implementing the same with gocql, following is my code:
cluster := gocql.NewCluster("127.0.0.1")
cluster.Authenticator = gocql.PasswordAuthenticator{
Username: "myuser",
Password: "mypassword",
}
cluster.SslOpts = &gocql.SslOptions {
CertPath: "/path/to/cert.pem",
}
When I try to connect I get following error:
gocql: unable to create session: connectionpool: unable to load X509 key pair: open : no such file or directory
In python I can do this with something like:
from cassandra.cluster import Cluster
from cassandra.auth import PlainTextAuthProvider
USER = 'username'
PASS = 'password'
ssl_opts = {'ca_certs': '/path/to/cert.pem',
'ssl_version': PROTOCOL_TLSv1
}
credentials = PlainTextAuthProvider(username = USER, password = PASS)
# define host, port, cqlsh protocaol version
cluster = Cluster(contact_points= HOST, protocol_version= CQLSH_PROTOCOL_VERSION, auth_provider = credentials, port = CASSANDRA_PORT)
I checked the gocql and TLS documentation here and here but I'm unsure about how to set ssl options.
答案1
得分: 1
你正在添加一个没有私钥的证书，这就是出现“没有该文件或目录”的错误的原因。
你的Python代码正在添加一个CA证书；你应该在Go代码中做同样的操作：
gocql.SslOptions {
CaPath: "/path/to/cert.pem",
}
英文:
You're adding a cert without a private key, which is where the "no such file or directory" error is coming from.
Your python code is adding a CA; you should do the same with the Go code:
gocql.SslOptions {
CaPath: "/path/to/cert.pem",
}
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库，让每个人都能够通过互相帮助和分享经验来进步。
评论