Go 1.22 remote error: tls: handshake failure

Mike铭

已于 2024-07-23 11:01:44 修改

阅读量65

点赞数 1

分类专栏： Go 文章标签： golang 开发语言

于 2024-07-23 11:01:07 首次发布

本文链接：https://blog.csdn.net/weixin_45760685/article/details/140629746

版权

Go 专栏收录该内容

15 篇文章 3 订阅

订阅专栏

Golang 1.22 remote error: tls: handshake failure

1.22之前运行下面代码是没有错误

package main

import (
	"crypto/tls"
	"fmt"
	"net/http"
)

func main() {
	http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}

	resp, err := http.Get("https://xxxxxxxxx")
	if err != nil {
		panic(err)
	}
	fmt.Println("status:", resp.Status)
}

但当golang升级1.22后就会出错，主要是crypto/tls 库已将基于 RSA 密钥交换的密码套件从默认列表中移除。这是因为基于 RSA 密钥交换的算法被认为是不够安全的，存在一些潜在的安全风险。

来源:https://pkg.go.dev/crypto/tls

// CipherSuites is a list of enabled TLS 1.0–1.2 cipher suites. The order of
// the list is ignored. Note that TLS 1.3 ciphersuites are not configurable.
//
// If CipherSuites is nil, a safe default list is used. The default cipher
// suites might change over time. In Go 1.22 RSA key exchange based cipher
// suites were removed from the default list, but can be re-added with the
// GODEBUG setting tlsrsakex=1.
CipherSuites []uint16

修复方法:设置ENV