Golang API 的 HTTPS

huangapple
go评论122阅读模式
英文:

HTTPS for Golang API

问题

我对Golang还不熟悉，但我可以帮你翻译一下你的问题和代码。

以下是你要翻译的内容：

我对Golang还不熟悉，但我已经在我们的VPS上设置了一个Golang API的“Hello World！”测试消息。它在http://www.example.com:8080/hello上正常工作。然而，我想切换到HTTPS。

有人可以逐步告诉我如何将Golang API从HTTP切换到HTTPS吗？谢谢！

如果Golang代码有问题的话：

  1. package main
  3. import (
  4.         "fmt"
  5.         "log"
  6.         "net/http"
  7. )
  9. func main() {
  10.         http.HandleFunc("/hello", func(w http.ResponseWriter, r *http.Request) {
  11.                 fmt.Fprintf(w, "Hello, World")
  12.         })
  14.         fmt.Println("Server Started On Port 8080")
  15.         log.Fatal(http.ListenAndServe(":8080", nil))
  16. }
英文:

I am new to Golang and I did set up a "hello world!" test message for a Golang API on our VPS. It works just fine at http://www.example.com:8080/hello. I would like however to move to HTTPS.

Could someone tell me step by step the right procedure to go from HTTP to HTTPS for a golang API? Thank you!

In case there is an issue with the golang code:

  1. package main
  3. import (
  4.         "fmt"
  5.         "log"
  6.         "net/http"
  7. )
  9. func main() {
  10.         http.HandleFunc("/hello", func(w http.ResponseWriter, r *http.Request) {
  11.                 fmt.Fprintf(w, "Hello, World")
  12.         })
  14.         fmt.Println("Server Started On Port 8080")
  15.         log.Fatal(http.ListenAndServe(":8080", nil))
  16. }

答案1

得分: 2

使用http.ListenAndServeTLS代替

https://pkg.go.dev/net/http#ListenAndServeTLS

  1. package main
  3. import (
  4. 	"fmt"
  5. 	"log"
  6. 	"net/http"
  7. )
  9. func main() {
  10. 	http.HandleFunc("/hello", func(w http.ResponseWriter, r *http.Request) {
  11. 		fmt.Fprintf(w, "Hello, World")
  12. 	})
  14. 	fmt.Println("Server Started On Port 8080")
  15. 	err := http.ListenAndServeTLS(":8080", "cert.pem", "key.pem", nil)
  16. 	log.Fatal(err)
  17. }

请注意，这是一个Go语言的示例代码，用于在端口8080上启动一个使用TLS的HTTP服务器。你需要将cert.pem和key.pem替换为你自己的TLS证书和私钥文件。

英文:

Use http.ListenAndServeTLS Instead

https://pkg.go.dev/net/http#ListenAndServeTLS

  1.     package main
  3. import (
  4.         "fmt"
  5.         "log"
  6.         "net/http"
  7. )
  9. func main() {
  10.         http.HandleFunc("/hello", func(w http.ResponseWriter, r *http.Request) {
  11.                 fmt.Fprintf(w, "Hello, World")
  12.         })
  14.         fmt.Println("Server Started On Port 8080")
  15.         err := http.ListenAndServeTLS(":8080", "cert.pem", "key.pem", nil)
  16.         log.Fatal(err)
  17. }

答案2

得分: 1

感谢John Hanley的支持，帮助我得出这个答案。
首先，我通过编辑/etc/apache2/ports.conf文件将端口8443设置为https：

  1. Listen 80
  3. <IfModule ssl_module>
  4.         Listen 443
  5.         Listen 8443
  6. </IfModule>

然后，我在example.com域的配置中添加了一个VirtualHost，使端口8443充当代理：

  1. <VirtualHost *:8443>
  2.         ServerAdmin admin@example.com
  3.         ServerName www.example.com
  4.         ServerAlias example.com
  6.         ProxyRequests Off
  7.         <Proxy *>
  8.                 Order deny,allow
  9.                 Allow from all
  10.         </Proxy>
  11.         ProxyPass / http://localhost:8080/
  12.         ProxyPassReverse / http://localhost:8080/
  14.         ErrorLog ${APACHE_LOG_DIR}/error.log
  15.         CustomLog ${APACHE_LOG_DIR}/access.log combined
  17.        Include /etc/letsencrypt/options-ssl-apache.conf
  18.        SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem
  19.        SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem
  20. </VirtualHost>

你需要使用a2enmod proxy和a2enmod proxy_http命令加载proxy和proxy_http模块。
重新加载apache之后，可以通过https://www.example.com:8443/hello调用API。

英文:

Thanks to John Hanley for support that lead to this answer.
First of all I did set the port 8443 for https by editing /etc/apache2/ports.conf:

  1. Listen 80
  3. &lt;IfModule ssl_module&gt;
  4.         Listen 443
  5.         Listen 8443
  6. &lt;/IfModule&gt;

Then I added a VirtualHost in the config of the example.com domain so that port 8443 acts as a proxy:

  1. &lt;VirtualHost *:8443&gt;
  2.         ServerAdmin admin@example.com
  3.         ServerName www.example.com
  4.         ServerAlias example.com
  6.         ProxyRequests Off
  7.         &lt;Proxy *&gt;
  8.                 Order deny,allow
  9.                 Allow from all
  10.         &lt;/Proxy&gt;
  11.         ProxyPass / http://localhost:8080/
  12.         ProxyPassReverse / http://localhost:8080/
  14.         ErrorLog ${APACHE_LOG_DIR}/error.log
  15.         CustomLog ${APACHE_LOG_DIR}/access.log combined
  17.        Include /etc/letsencrypt/options-ssl-apache.conf
  18.        SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem
  19.        SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem
  20. &lt;/VirtualHost&gt;

and you need to load the modules proxy and proxy_http using e2enmod proxy and e2enmod proxy_http.
After reloading apache, the API can be called at https://www.example.com:8443/hello.

答案3

得分: 0

添加到@Dan的答案上。这是一个稍微复杂一些的实现，但可以让你进行更多的配置。

如果你想使用多个证书集合：

  1. certs := []tls.Certificate{}
  2. for _, cert := range []string{"cert1", "cert2"} {
  3.     certSet, err := tls.LoadX509KeyPair(cert+".pem", cert+".key")
  4.     if err != nil {
  5.         return err
  6.     }
  7.     certs = append(certs, certSet)
  8. }

创建tls配置：

  1. cfg := &tls.Config{
  2.     Certificates: certs,
  3.     MinVersion:   tls.VersionTLS12,
  4. }
  5. cfg.BuildNameToCertificate()
  6. server := &http.Server{
  7.     Addr:        ":8080",
  8.     TLSConfig:   cfg,
  9.     IdleTimeout: 30 * time.Second,
  10. }

添加处理程序并启动服务器：

  1. http.HandleFunc("/hello", func(w http.ResponseWriter, r *http.Request) {
  2.     fmt.Fprintf(w, "Hello, World")
  3. })
  5. err := server.ListenAndServeTLS("", "") // 如果在上面的tls配置中提供了一组证书，则此处不要提供文件名
  6. if err != nil {
  7.     return err
  8. }
英文:

Adding on to @Dan 's answer. A little more complex implementation but enables you to configure it more.

If you want to use more than 1 set of certs

  1. certs := []tls.Certificate{}
  2. for _, cert := range []{&quot;cert1&quot;, &quot;cert2&quot;} {
  3.     certSet, err := tls.LoadX509KeyPair(cert+&quot;.pem&quot;, cert+&quot;.key&quot;)
  4.     if err != nil {
  5.         return err
  6.     }
  7.     certs = append(certs, certSet)
  8. }

Create tls config

  1. cfg := &amp;tls.Config {
  2.     Certificates: certs,
  3.     MinVersion:   tls.VersionTLS12,
  4. }
  5. cfg.BuildNameToCertificate()
  6. server := &amp;http.Server{
  7.     Addr:        &quot;:8080&quot;,
  8.     TLSConfig:   cfg,
  9.     IdleTimeout: 30 * time.Second,
  10. }

Add handler and start server

  1. http.HandleFunc(&quot;/hello&quot;, func(w http.ResponseWriter, r *http.Request) {
  2.     fmt.Fprintf(w, &quot;Hello, World&quot;)
  3. })
  5. err := server.ListenAndServeTLS(&quot;&quot;, &quot;&quot;) // Dont give filename here if giving set of certs in tls config above
  6. if err != nil {
  7.     return err
  8. }

huangapple
  • 本文由 发表于 2022年4月22日 01:33:54
  • 转载请务必保留本文链接：https://go.coder-hub.com/71958629.html
  • apache
  • go
  • https
匿名

发表评论

匿名网友

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen:

确定