How to connect to mongoDB via ssl using .crt file in Go

huangapple
go评论119阅读模式
英文:

How to connect to mongoDB via ssl using .crt file in Go

问题

我正在尝试使用.crt文件连接到托管在Azure上的Mongo数据库。

我可以成功地从我的Linux机器终端使用以下命令连接：

  1. mongo mongodb://username:password@prod-replicaset-0.com:27017,prod-replicaset-1.com:27017,prod-replicaset-2.com:27017/ --tls --tlsCAFile rootca.crt --tlsAllowInvalidCertificates

我还可以通过设置"Use SSL protocol"并将认证机制设置为"SCRAM-SHA-256"来从Mongo UI客户端（如Robo3T）连接。
[如果将认证机制设置为其他值，将导致身份验证失败]

但是，我无法在Go语言代码中连接到该数据库。

这是我正在使用的代码示例：

  1. package main
  3. import (
  4. 	"crypto/tls"
  5. 	"crypto/x509"
  6. 	"io/ioutil"
  7. 	"log"
  8. 	"net"
  10. 	"github.com/globalsign/mgo"
  11. )
  13. func InitMongo() error {
  15. 	rootCerts := x509.NewCertPool()
  16. 	ca, err := ioutil.ReadFile("./rootca.crt")
  17. 	if err != nil {
  18. 		log.Fatalf("failed to read file : %s", err.Error())
  19. 		return err
  20. 	}
  22. 	success := rootCerts.AppendCertsFromPEM(ca)
  23. 	if !success {
  24. 		log.Printf("rootcert failed")
  25. 	}
  27. 	connStr := "mongodb://username:password@prod-replicaset-0.com:27017,prod-replicaset-1.com:27017,prod-replicaset-2.com:27017/?ssl=true"
  29. 	dbDialInfo, err := mgo.ParseURL(connStr)
  30. 	if err != nil {
  31. 		log.Fatal("unable to parse url - " + err.Error())
  32. 	}
  34. 	dbDialInfo.DialServer = func(addr *mgo.ServerAddr) (net.Conn, error) {
  35. 		return tls.Dial("tcp", addr.String(), &tls.Config{
  36. 			RootCAs:            rootCerts,
  37. 			InsecureSkipVerify: true,
  38. 		})
  39. 	}
  41. 	// dbDialInfo.Mechanism = "SCRAM-SHA-256"
  43. 	_session, err := mgo.DialWithInfo(dbDialInfo)
  44. 	if err != nil {
  45. 		log.Fatalf("failed to creating db session : %s", err.Error())
  46. 		return err
  47. 	}
  49. 	log.Printf("Created session - %v", _session)
  51. 	return nil
  52. }

当我运行此代码时，我收到错误消息：
failed to creating db session : "server returned error on SASL authentication step: Authentication failed."

如果在创建会话之前设置[dbDialInfo.Mechanism = "SCRAM-SHA-256"]，我收到错误消息：
failed to creating db session : "SASL support not enabled during build (-tags sasl)"

请告诉我是什么原因导致了这个问题，我该如何连接到数据库。
目前我正在使用"github.com/globalsign/mgo"，如果需要使用其他库，对我来说完全没问题。
我只想连接到数据库。

rootca.crt文件的内容如下：

  1. -----BEGIN CERTIFICATE-----
  2. MIIGLjCCBBagAwIBAgIUbxINX1qe6W+7kolWGp+MX8NbYj8wDQYJKoZIhvcNAQEL
  3. <blah> <blah> <blah> <blah> <blah> <blah> <blah> <blah> <blah> <blah> 
  4. jCZAGGHmbrR3zeIsOY8yKau0IXqRp5Wy6NQ0poOTcma9BfwNUVc4/ixsCkEVYbgW
  5. eMs=
  6. -----END CERTIFICATE-----

谢谢。

英文:

I am trying to connect to a mongo database hosted in azure using the .crt file.

I am successfully able to connect from my linux machine terminal using command:

  1. mongo mongodb://username:password@prod-replicaset-0.com:27017,prod-replicaset-1.com:27017,prod-replicaset-2.com:27017/ --tls --tlsCAFile rootca.crt --tlsAllowInvalidCertificates

I am also able to connect from mongo UI client like robo3T by setting "Use SSL protocol" and using Auth Mechanism as "SCRAM-SHA-256".
[If I set Auth Mechanism to any other value, results in Authentication Failure]

But I am not able to connect to that database in Go lang code.

Here is a sample of code I am using:

  1. package main
  3. import (
  4. 	&quot;crypto/tls&quot;
  5. 	&quot;crypto/x509&quot;
  6. 	&quot;io/ioutil&quot;
  7. 	&quot;log&quot;
  8. 	&quot;net&quot;
  10. 	&quot;github.com/globalsign/mgo&quot;
  11. )
  13. func InitMongo() error {
  15. 	rootCerts := x509.NewCertPool()
  16. 	ca, err := ioutil.ReadFile(&quot;./rootca.crt&quot;)
  17. 	if err != nil {
  18. 		log.Fatalf(&quot;failed to read file : %s&quot;, err.Error())
  19. 		return err
  20. 	}
  22. 	success := rootCerts.AppendCertsFromPEM(ca)
  23. 	if !success {
  24. 		log.Printf(&quot;rootcert failed&quot;)
  25. 	}
  27. 	connStr := &quot;mongodb://username:password@prod-replicaset-0.com:27017,prod-replicaset-1.com:27017,prod-replicaset-2.com:27017/?ssl=true&quot;
  29. 	dbDialInfo, err := mgo.ParseURL(connStr)
  30. 	if err != nil {
  31. 		log.Fatal(&quot;unable to parse url - &quot; + err.Error())
  32. 	}
  34. 	dbDialInfo.DialServer = func(addr *mgo.ServerAddr) (net.Conn, error) {
  35. 		return tls.Dial(&quot;tcp&quot;, addr.String(), &amp;tls.Config{
  36. 			RootCAs:            rootCerts,
  37. 			InsecureSkipVerify: true,
  38. 		})
  39. 	}
  41. 	// dbDialInfo.Mechanism = &quot;SCRAM-SHA-256&quot;
  43. 	_session, err := mgo.DialWithInfo(dbDialInfo)
  44. 	if err != nil {
  45. 		log.Fatalf(&quot;failed to creating db session : %s&quot;, err.Error())
  46. 		return err
  47. 	}
  49. 	log.Printf(&quot;Created session - %v&quot;, _session)
  51. 	return nil
  52. }

When I run this code, I get error:
failed to creating db session : "server returned error on SASL authentication step: Authentication failed."

If I set [dbDialInfo.Mechanism = "SCRAM-SHA-256"] before creating session, I get error:
failed to creating db session : "SASL support not enabled during build (-tags sasl)"

Please let me know what is causing this issue, how can I connect to the database.
Currently I am using "github.com/globalsign/mgo", if it required to use any other library, that's totally fine for me.
I just want to get connected to the db.

rootca.crt file looks something like:

  1. -----BEGIN CERTIFICATE-----
  2. MIIGLjCCBBagAwIBAgIUbxINX1qe6W+7kolWGp+MX8NbYj8wDQYJKoZIhvcNAQEL
  3. &lt;blah&gt; &lt;blah&gt; &lt;blah&gt; &lt;blah&gt; &lt;blah&gt; &lt;blah&gt; &lt;blah&gt; &lt;blah&gt; &lt;blah&gt; 
  4. jCZAGGHmbrR3zeIsOY8yKau0IXqRp5Wy6NQ0poOTcma9BfwNUVc4/ixsCkEVYbgW
  5. eMs=
  6. -----END CERTIFICATE-----

Thank you.

答案1

得分: 0

经过大量研究，我无法找到使用globalsign库连接到mongodb的方法，使用.crt文件。

但是，我成功地使用mongo-driver库实现了这一点。
这里的连接字符串可以采用以下格式：

  1. mongodb://user:password@replicaset-0.com:27017,replicaset-1.com:27017,replicaset-2.com:27017/?ssl=true&amp;tlsCAFile=./ca.crt&amp;tlsCertificateKeyFile=./ca.pem&amp;authSource=admin&amp;replicaSet=replicaset

示例代码：

  1. import (
  2. 	"context"
  3. 	"log"
  4. 	"os"
  6. 	// "github.com/globalsign/mgo"
  7. 	mgo "go.mongodb.org/mongo-driver/mongo"
  9. 	mongoOptions "go.mongodb.org/mongo-driver/mongo/options"
  10. )
  12. func InitMongo() error {
  14. 	connStr := os.Getenv("MONGODB_CONN_STR")
  15. 	dbName := os.Getenv("MONGODB_DATABASE")
  17. 	clientOpts := mongoOptions.Client().ApplyURI(connStr)
  18. 	if err := clientOpts.Validate(); err != nil {
  19. 		log.Print("无法解析URL")
  20. 		log.Fatal(err)
  21. 	}
  22. 	client, err := mgo.Connect(context.TODO(), clientOpts)
  23. 	if err != nil {
  24. 		log.Print("无法连接到数据库")
  25. 		log.Fatal(err)
  26. 	}
  27. 	if err := client.Ping(context.TODO(), nil); err != nil {
  28. 		log.Print("数据库ping失败")
  29. 		log.Fatal(err)
  30. 	}
  32. 	//client.Database(dbName)
  34. 	return nil
  35. }
英文:

After researching a lot, I was not able to find a way to connect to mongodb using .crt file using globalsign library.

However I was successfully able to do this using mongo-driver library.
here connection string can be of format:

  1. mongodb://user:password@replicaset-0.com:27017,replicaset-1.com:27017,replicaset-2.com:27017/?ssl=true&amp;tlsCAFile=./ca.crt&amp;tlsCertificateKeyFile=./ca.pem&amp;authSource=admin&amp;replicaSet=replicaset

Sample code:

  1. import (
  2. 	&quot;context&quot;
  3. 	&quot;log&quot;
  4. 	&quot;os&quot;
  6. 	// &quot;github.com/globalsign/mgo&quot;
  7. 	mgo &quot;go.mongodb.org/mongo-driver/mongo&quot;
  9. 	mongoOptions &quot;go.mongodb.org/mongo-driver/mongo/options&quot;
  10. )
  11. func InitMongo() (error) {
  12. 	
  13. 	connStr := os.Getenv(&quot;MONGODB_CONN_STR&quot;)
  14. 	dbName := os.Getenv(&quot;MONGODB_DATABASE&quot;)
  16. 	clientOpts := mongoOptions.Client().ApplyURI(connStr)
  17. 	if err := clientOpts.Validate(); err != nil {
  18. 		log.Print(&quot;unable to parse url&quot;)
  19. 		log.Fatal(err)
  20. 	}
  21. 	client, err := mgo.Connect(context.TODO(), clientOpts)
  22. 	if err != nil {
  23. 		log.Print(&quot;unable to connect into database&quot;)
  24. 		log.Fatal(err)
  25. 	}
  26. 	if err := client.Ping(context.TODO(), nil); err != nil {
  27. 		log.Print(&quot;database ping failed&quot;)
  28. 		log.Fatal(err)
  29. 	}
  31. 	//client.Database(dbName)
  33. 	return nil
  34. }

huangapple
  • 本文由 发表于 2021年9月23日 19:17:38
  • 转载请务必保留本文链接：https://go.coder-hub.com/69298986.html
  • azure
  • go
  • mgo
  • mongodb
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定