Go 1.22 remote error: tls: handshake failure
Golang 1.22 remote error: tls: handshake failure
1.22之前运行下面代码是没有错误
package mainimport ("crypto/tls""fmt""net/http"
)func main() {http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}resp, err := http.Get("https://xxxxxxxxx")if err != nil {panic(err)}fmt.Println("status:", resp.Status)
}
但当golang升级1.22后就会出错，主要是crypto/tls 库已将基于 RSA 密钥交换的密码套件从默认列表中移除。这是因为基于 RSA 密钥交换的算法被认为是不够安全的，存在一些潜在的安全风险。
来源:https://pkg.go.dev/crypto/tls
// CipherSuites is a list of enabled TLS 1.0–1.2 cipher suites. The order of
// the list is ignored. Note that TLS 1.3 ciphersuites are not configurable.
//
// If CipherSuites is nil, a safe default list is used. The default cipher
// suites might change over time. In Go 1.22 RSA key exchange based cipher
// suites were removed from the default list, but can be re-added with the
// GODEBUG setting tlsrsakex=1.
CipherSuites []uint16
修复方法:设置ENV
os.Setenv("GODEBUG", "tlsrsakex=1")