donglugou6652 2018-10-24 06:07
浏览 828
已采纳

如何使用gorm创建与MySQL的SSL连接?

Can't seem to find any resource on creating a SSL connection to mysql using gorm. I am creating a non-ssl connection like this:

cfg := mysql.Config{
    User:   config.User,
    Passwd: config.Password,
    Addr:   fmt.Sprintf("%s:%d", config.Host, config.Port),
    Net:    "tcp",
    Params: options,
}

str := cfg.FormatDSN()
db, err := gorm.Open("mysql", str)

Passing 'ssl-ca' option in Param options with path to 'pem' file does not seem to work. Any heads up on this?

  • 写回答

1条回答 默认 最新

  • doushu5451 2019-01-16 17:25
    关注

    This is a fragment of my working code :

    isTLS := false
    
    if mysqlClientKey != "" && mysqlCaCert != ""  && mysqlClientCert != "" {
        isTLS = true
        rootCertPool := x509.NewCertPool()
        pem, err := ioutil.ReadFile("/path/mysqlCaCert")
        if err != nil {
            log.Fatal(err)
        }
        if ok := rootCertPool.AppendCertsFromPEM(pem); !ok {
            log.Fatal("Failed to append PEM.")
        }
        clientCert := make([]tls.Certificate, 0, 1)
        certs, err := tls.LoadX509KeyPair("/path/mysqlClientCert", "/path/mysqlClientKey")
        if err != nil {
            log.Fatal(err)
        }
        clientCert = append(clientCert, certs)
        mysql.RegisterTLSConfig("custom", &tls.Config{
            RootCAs:      rootCertPool,
            Certificates: clientCert,
        })
    }
    
    // try to connect to mysql database.
    cfg := mysql.Config{
        User:   username,
        Passwd: password,
        Addr:   server, //IP:PORT
        Net:    "tcp",
        DBName: database,
        Loc: time.Local,
        AllowNativePasswords: true,
        Params: o,
    }
    
    if isTLS == true {
        cfg.TLSConfig = "custom"
    }
    
    str := cfg.FormatDSN()
    
    db, err := gorm.Open("mysql", str)
    
    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 layui 代码问题解决
  • ¥15 TCP传输时不同网卡传输用时差异过大
  • ¥15 请各位看看我写的属于什么算法,或者有更正确的写法?
  • ¥15 html5 qrcode 扫描器
  • ¥15 爬取网页信息并保存需要完整代码
  • ¥15 一分十不等功分器阻设计问题,请问这个56Ω怎么得到的
  • ¥15 (标签-matlab)
  • ¥100 求看看这个数学建模,有偿
  • ¥15 深度学习目标检测现在框架加注意力的创新可以投几区?
  • ¥15 PdfiumViewer pdf转图片