package main
import (
	"log"
	"net/http"
	"time"
	"github.com/gin-gonic/gin"
)
/* 中間件: 獲取api處理時(shí)長(zhǎng) */
func midElapsed(c *gin.Context) {
	start := time.Now()
	c.Next()
	elapsed := time.Since(start)
	log.Printf("API: %s, elapsed: %s", c.Request.URL.Path, elapsed)
}
/* 處理 GET / 請(qǐng)求 */
func f1(c *gin.Context) {
	// 獲取客戶端IP
	clientIP := c.ClientIP()
	// 獲取請(qǐng)求方法
	method := c.Request.Method
	// 獲取協(xié)議
	proto := c.Request.Proto
	// 獲取host
	host := c.Request.Host
	// 請(qǐng)求Path
	path := c.Request.URL.Path
	log.Printf("客戶端IP: %s, 請(qǐng)求方法: %s, 協(xié)議: %s, host: %s, path: %s", clientIP, method, proto, host, path)
	// 獲取請(qǐng)求頭
	headers := c.Request.Header
	for hk, hv := range headers {
		log.Printf("header key: %s, value: %s", hk, hv)
	}
	// 獲取名為"mycookie"的cookie
	var cookies []string
	cookie, err := c.Cookie("mycookie")
	if err != nil {
		log.Printf("get cookie [mycookie] error: %s", err)
	} else {
		log.Printf("get cookie [mycookie]: %s", cookie)
		cookies = append(cookies, cookie)
	}
	c.JSON(http.StatusOK, gin.H{
		"clientIP": clientIP,
		"method":   method,
		"proto":    proto,
		"host":     host,
		"headers":  headers,
		"cookies":  cookies,
		"path":     path,
	})
}
func main() {
	r := gin.Default()
	r.Use(midElapsed) // 全局引用計(jì)算耗時(shí)的中間件
	r.GET("/", f1)
	r.Run("0.0.0.0:8080")
}

[req]
req_extensions = v3_req
distinguished_name = req_distinguished_name
prompt = no
[req_distinguished_name]
countryName = CN
stateOrProvinceName = Anhui
localityName = Hefei
organizationName = zhangsan
commonName = qw.er.com
[v3_req]
subjectAltName = @alt_names
[alt_names]
DNS.1 = qw.er.com

server {
    listen 80 ssl;
    server_name qw.er.com;
    ssl_certificate /home/atlas/apps/nginx/certs/qwer/server.crt;
    ssl_certificate_key /home/atlas/apps/nginx/certs/qwer/server.key;
    # 校驗(yàn)客戶端證書
    ssl_verify_client on;
    ssl_client_certificate /home/atlas/apps/nginx/certs/qwer/ca.crt;
    location / {
        proxy_set_header Host $host;
        proxy_set_header X-real-ip $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://192.168.0.10:8080; # 服務(wù)端地址
    }
}

package main
import (
	"crypto/tls"
	"crypto/x509"
	"flag"
	"io"
	"log"
	"net/http"
	"os"
	"time"
)
var (
	cafile  = flag.String("cafile", "ca.crt", "ca 證書文件")
	crtfile = flag.String("crtfile", "client.crt", "客戶端tls證書")
	keyfile = flag.String("keyfile", "client.key", "客戶端tls私鑰")
	url     = flag.String("url", "http://127.0.0.1:8080", "url")
	isTls   = flag.Bool("tls", false, "是否使用tls")
)
func tlsClient(cafile, crtfile, keyfile string) *http.Transport {
	// 加載證書和私鑰
	clientCert, err := tls.LoadX509KeyPair(crtfile, keyfile)
	if err != nil {
		log.Fatalf("load key pair error: %s", err)
	}
	// 加載ca證書
	clientCA, err := os.ReadFile(cafile)
	if err != nil {
		log.Fatalf("load ca cert error: %s", err)
	}
	// 創(chuàng)建根證書池并添加ca證書
	caCertPool := x509.NewCertPool()
	caCertPool.AppendCertsFromPEM(clientCA)
	// 創(chuàng)建transport
	tr := &http.Transport{
		TLSClientConfig: &tls.Config{
			Certificates: []tls.Certificate{clientCert},
			RootCAs:      caCertPool,
		},
	}
	return tr
}
func main() {
	flag.Parse()
	req, err := http.NewRequest("GET", *url, nil)
	if err != nil {
		log.Fatalf("new request error: %s", err)
	}
	// 自定義HTTP請(qǐng)求頭
	req.Header.Set("myheader1", "myheader1value123")
	// 自定義一個(gè)cookie對(duì)象
	cookie := &http.Cookie{
		Name: "mycookie",
		Value: "mycookievalue",
	}
	req.AddCookie(cookie)
	client := &http.Client{
		Timeout: time.Second * 5,
	}
	if *isTls {
		client.Transport = tlsClient(*cafile, *crtfile, *keyfile)
	}
	resp, err := client.Do(req)
	if err != nil {
		log.Fatalf("get error: %s", err)
	}
	defer resp.Body.Close()
	body, err := io.ReadAll(resp.Body)
	if err != nil {
		log.Fatalf("read error: %s", err)
	}
	log.Printf("body: %+v", string(body))
}

server {
    listen 80 ssl;
    server_name qw.er.com;
    ssl_certificate /home/elifen/apps/nginx/certs/qwer/server.crt;
    ssl_certificate_key /home/elifen/apps/nginx/certs/qwer/server.key;
    ssl_verify_client on;
    ssl_client_certificate /home/elifen/apps/nginx/qwer/ca.crt;
    location / {
        proxy_set_header Host $host;
        proxy_set_header X-real-ip $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_pass http://192.168.0.10:8080;
    }
}

go run main.go -cafile ./ca.crt -crtfile ./client.crt -keyfile ./client.key -url 'https://qw.er.com:80/' -tls