Golang网络数据加密实现方法

package main

import (
    "fmt"
    "net/http"
)

func handler(w http.ResponseWriter, r *http.Request) {
    fmt.Fprintf(w, "Hello, This is encrypted!")
}

func main() {
    http.HandleFunc("/", handler)
    // 使用自签名或正式证书
    err := http.ListenAndServeTLS(":8443", "server.crt", "server.key", nil)
    if err != nil {
        panic(err)
    }
}

cert, err := tls.LoadX509KeyPair("server.crt", "server.key")
if err != nil {
    log.Fatal(err)
}

config := &tls.Config{Certificates: []tls.Certificate{cert}}
listener, err := tls.Listen("tcp", ":8000", config)
if err != nil {
    log.Fatal(err)
}
defer listener.Close()

for {
    conn, err := listener.Accept()
    if err != nil {
        continue
    }
    go handleConn(conn)
}

cert, err := ioutil.ReadFile("ca.crt") // CA 证书
if err != nil {
    log.Fatal(err)
}
caPool := x509.NewCertPool()
caPool.AppendCertsFromPEM(cert)

config := &tls.Config{RootCAs: caPool}
conn, err := tls.Dial("tcp", "localhost:8000", config)
if err != nil {
    log.Fatal(err)
}
defer conn.Close()