使用 Go 的 database/sql 软件包为与 Cloud SQL for SQL Server 的 TCP 连接配置 SSL(安全套接字层)证书。
代码示例
Go
如需向 Cloud SQL for SQL Server 进行身份验证,请设置应用默认凭据。如需了解详情,请参阅为本地开发环境设置身份验证。
package cloudsql
import (
"database/sql"
"fmt"
"log"
"os"
"strings"
_ "github.com/denisenkom/go-mssqldb"
)
// connectTCPSocket initializes a TCP connection pool for a Cloud SQL
// instance of SQL Server.
func connectTCPSocket() (*sql.DB, error) {
mustGetenv := func(k string) string {
v := os.Getenv(k)
if v == "" {
log.Fatalf("Fatal Error in connect_tcp.go: %s environment variable not set.\n", k)
}
return v
}
// Note: Saving credentials in environment variables is convenient, but not
// secure - consider a more secure solution such as
// Cloud Secret Manager (https://cloud.google.com/secret-manager) to help
// keep secrets safe.
var (
dbUser = mustGetenv("DB_USER") // e.g. 'my-db-user'
dbPwd = mustGetenv("DB_PASS") // e.g. 'my-db-password'
dbTCPHost = mustGetenv("INSTANCE_HOST") // e.g. '127.0.0.1' ('172.17.0.1' if deployed to GAE Flex)
dbPort = mustGetenv("DB_PORT") // e.g. '1433'
dbName = mustGetenv("DB_NAME") // e.g. 'my-database'
)
dbURI := fmt.Sprintf("server=%s;user id=%s;password=%s;port=%s;database=%s;",
dbTCPHost, dbUser, dbPwd, dbPort, dbName)
// (OPTIONAL) Configure SSL certificates
// For deployments that connect directly to a Cloud SQL instance without
// using the Cloud SQL Proxy, configuring SSL certificates will ensure the
// connection is encrypted.
if dbRootCert, ok := os.LookupEnv("DB_ROOT_CERT"); ok { // e.g., '/path/to/my/server-ca.pem'
// Get connection host name to be matched with host name in SSL certificate.
var instanceConnectionName = mustGetenv("INSTANCE_CONNECTION_NAME")
// Expected format of INSTANCE_CONNECTION_NAME is project_id:region:instance_name
hostNameParts := strings.Split(instanceConnectionName, ":")
if len(hostNameParts) != 3 {
log.Fatalf("Invalid format for INSTANCE_CONNECTION_NAME environment variable, got = %q", instanceConnectionName)
}
// Specify encrypted connection, host name and certificate.
dbURI += fmt.Sprintf("encrypt=true;hostnameincertificate=%s:%s;certificate=%s;",
hostNameParts[0], hostNameParts[2], dbRootCert)
}
// dbPool is the pool of database connections.
dbPool, err := sql.Open("sqlserver", dbURI)
if err != nil {
return nil, fmt.Errorf("sql.Open: %w", err)
}
// ...
return dbPool, nil
}
后续步骤
如需搜索和过滤其他 Google Cloud 产品的代码示例,请参阅 Google Cloud 示例浏览器。