「go-zero 系列」gRPC SSL/TLS 单向认证

最新推荐文章于 2025-10-15 09:19:29 发布

原创

最新推荐文章于 2025-10-15 09:19:29 发布 · 2.6k 阅读

2 ·

CC 4.0 BY-SA版权

文章标签：

#ssl #golang #https

本文详细介绍了在Go 1.16中如何生成CA证书、私钥和服务器证书，包括openssl工具的使用步骤，以及注意事项。重点在于Ubuntu 16.04下openssl.cnf文件的配置。

💬

生活总是这样。

💻

最近在看 grpc tls 认证，发现使用 go1.16 版本证书的生成相较之前会麻烦挺多，证书生成参考

# 生成 ca 证书密钥
ronething at ronething-dell-ubuntu in ~/Documents/grpc-sample/tls
$ openssl genrsa -out ca.key 2048

# 生成 ca 证书公钥
ronething at ronething-dell-ubuntu in ~/Documents/grpc-sample/tls 
$ openssl req -new -x509 -days 3650 -key ca.key -out ca.pem
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:GZ       
Locality Name (eg,