架設一個簡單的Https Web伺服器

info

OS: Ubuntu 20.04

Install Golang packages

安裝GVM

sudo apt-get update
sudo apt-get install -y binutils bison gcc make 

bash < <(curl -s -S -L https://raw.githubusercontent.com/moovweb/gvm/master/binscripts/gvm-installer) 

source /home/$(whoami)/.gvm/scripts/gvm 

安裝1.18版本，並設定預設版本。

gvm install go1.18 -B
gvm use go1.18 --default

Generate a SSL certificate

先行產生兩個檔案，.csr和.key檔案會用來產生證書(.crt)用的。

例如：server.key (私密金鑰 Private Key)、server.crt (憑證檔)、server.crt (中繼憑證 Intermediate CA)

指令: openssl req -newkey rsa:4096 -nodes -keyout server.key -out server.csr

For example:

$ openssl req -newkey rsa:4096 -nodes -keyout server.key -out server.csr

Generating a RSA private key
...............................................................++++
............++++
writing new private key to 'server.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

$ ls
server.csr  server.key

再來產生ssl檔案。

$ openssl x509 -signkey server.key -in server.csr -req -days 365 -out server.crt

Signature ok
subject=C = AU, ST = Some-State, O = Internet Widgits Pty Ltd
Getting Private key

$ ls
server.crt  server.csr  server.key

創建一個Web server

先行下載相依包。

go install "github.com/gin-gonic/gin@latest"

創見一個檔案夾名為 server 然後初始化一下。
```
mkdir server && cd server
go mod init server
go mod tidy
```

創立一個名為main.go的文件並打開。

main.go
package main

import "github.com/gin-gonic/gin"
func main() {
    // gin.SetMode(gin.ReleaseMode)
    r := gin.Default()
    r.GET("/", func(c *gin.Context) {
        c.String(200, "hello world")
    })

    
    // go r.RunTLS(":5555", "./certs/server.crt", "./certs/server.key")
    r.Run(":5757")
}

先啟動http服務測試一下是否有問題。

go run main.go

Outputs:

[GIN-debug] [WARNING] Creating an Engine instance with the Logger and Recovery middleware already attached.

[GIN-debug] [WARNING] Running in "debug" mode. Switch to "release" mode in production.
 - using env:   export GIN_MODE=release
 - using code:  gin.SetMode(gin.ReleaseMode)

[GIN-debug] GET    /                         --> main.main.func1 (3 handlers)
[GIN-debug] [WARNING] You trusted all proxies, this is NOT safe. We recommend you to set a value.
Please check https://pkg.go.dev/github.com/gin-gonic/gin#readme-don-t-trust-all-proxies for details.
[GIN-debug] Listening and serving HTTP on :5757

成功。

把剛剛產生的keys丟到程式目錄底下。

mkdir certs
mv ../server.key certs/
mv ../server.crt certs/

把第12行的程式註解掉，再跑一次。
```
go run main.go
```
即可同時跑起http和https的web server了。
接下來，讓我們來產生執行。
```
go build main.go
./main 
```
即可運行成功！ (如果搬動此執行檔，務必把certs的檔案夾也要一起放置相對路徑下，方能正常執行。)

可以簡單的在瀏覽器查看：https://(ip):5555

Install Golang packages​

Generate a SSL certificate​

創建一個Web server​

Install Golang packages

Generate a SSL certificate

創建一個Web server