小编点评

## Using Gin with HTTPS support This code demonstrates using Gin for an HTTPS server with TLS/SSL certificate validation and secure configuration. **Key Takeaways:** * Gin supports HTTPS through middleware. * Viper configuration file is used to define TLS/SSL settings. * `tlsHandler` handles TLS communication and enforces certificate validation. * `gin.RunTLS` configures HTTPS server with provided port, certificate, and key. **Code Walkthrough:** 1. **Initialization:** * Viper loads configuration file and sets up TLS/SSL settings. * `tlsHandler` is created to handle TLS communication. 2. **Server Configuration:** * `gin.Default` is used to create a new Gin server. * `GET` route is registered to handle HTTP requests. * `tlsHandler` is assigned to the route for handling HTTPS requests. 3. **Running the Server:** * `tlsHandler` ensures SSL/TLS connection establishment. * `gin.RunTLS` configures HTTPS server on specified port. * Server starts listening on the specified port. **Security Considerations:** * The provided code uses a self-signed certificate for demonstration purposes. * This is not recommended for production use as it may present security vulnerabilities. * The certificate should be generated with a valid certificate authority and trusted by the server. **Example Usage:** To run the server, run the following command: ```bash go run main.go ``` **Additional Notes:** * `port` variable in configuration defines the server listening port. * `tls.enable` flag determines whether to enable TLS/SSL encryption. * `tls.cert` and `tls.key` specify path to certificate and key files. **Disclaimer:** This code is provided for educational purposes only. Use it at your own risk and always consider security best practices for production implementations.

正文

gin是一个使用Go语言开发的Web框架，具有运行速度快，分组的路由器，良好的崩溃捕获和错误处理，支持中间件等。

在工作中有时候需要支持https服务，gin可以通过中间件的方式来提供对https的支持，这里使用的是secure来提供https服务支持。这里给出一个简单的使用示例：

示例代码

package main

import (
	"fmt"
	"net/http"

	"github.com/gin-gonic/gin"
	"github.com/spf13/viper"
	"github.com/unrolled/secure"
)

func init() {
	viper.SetConfigFile("./config/config.yaml")
	if err := viper.ReadInConfig(); err != nil {
		panic(err.Error())
	}
}

func main() {
	engine := gin.Default()

	engine.GET("/test", func(ctx *gin.Context) {
		ctx.String(http.StatusOK, "this is a https test")
	})

	if viper.GetBool("tls.enable") {
		engine.Use(tlsHandler(viper.GetString("port")))
		engine.RunTLS(":"+viper.GetString("port"), viper.GetString("tls.cert"), viper.GetString("tls.key"))
	} else {
		engine.Run(":" + viper.GetString("port"))
	}
}

func tlsHandler(port string) gin.HandlerFunc {
	return func(ctx *gin.Context) {
		tlsMiddleward := secure.New(secure.Options{
			SSLRedirect: true,
			SSLHost:     ":" + port,
		})
		if err := tlsMiddleward.Process(ctx.Writer, ctx.Request); err != nil {
			fmt.Printf("tlsHandler error: %s",err.Error())
			return
		}
		ctx.Next()
	}
}

结果示例

http服务

配置：

version: '3.3'

port: 18080

tls:
  enable: false 
  cert: ./config/server.pem
  key: ./config/server.key

https服务

version: '3.3'

port: 18080

tls:
  enable: true 
  cert: ./config/server.pem
  key: ./config/server.key

这里的不安全使用使用的证书是一个测试证书

---

声明：本作品采用署名-非商业性使用-相同方式共享 4.0 国际 (CC BY-NC-SA 4.0)进行许可，使用时请注明出处。
Author: mengbin92
Github: mengbin92
cnblogs: 恋水无意

---