使用Rust语言实现openGauss数据库驱动 基于SHA256进行权限认证 能够执行增删改查SQL语句 ## 方案介绍 - 思路 ✗ 参考 JDBC 标准，使用 rust 语言实现一个简单的只包含核心部分的版本 ✓ 基于开源的 rust-postgres 驱动开发，实现基于 sha256 的鉴权方式连接 openGuass 数据库 ✗ 使用-rust语言已有的-sha256方式 ✗ 使用-rust语言已有的RFC5802三方包 使用-rust语言已有的RFC5802三方包 ✓ 参考已有的基于 JAVA 语言实现的 openGauss sha256 鉴权代码，使用 rust 语言重新实现 ## 方案介绍 - 认证流程 startup 会首先建立连接，同时会发送认证协议的版本； 服务器会响应具体的认证方式以及该认证方式所需的信息； 客户端根据要求的认证方式通过认证后，就可以向服务器端发送各种数据库命令  ## 方案介绍 - SHA256认证 SHA256 认证是 openGuass 在 postgres 支持的认证方法之上，额外提供的一种更安全的认证方式。其认证流程遵循 RFC5802 标准 ![Image](/uploads/do

"layers", "diff_ids": [ "sha256:46e7865bff73b5a0c610bf9f20c91dfafa2518ace8703faaffff551a4773b947", "sha256:6189abe095d53c1c9f2bfc8f50128ee876b9a5d10f9eda156 4e5f5357d6ffe61", "sha256:e8292403028e724f0c7686ede4cd89180faa85aeb63cd0e7d560e8a459d83afe", "sha256:ff7666ffd3d45500f4af71f091a603413acb04d028ba03a6698f63819d246cb5" 46cb5", "sha256:db22fdca5c6344265d841ec106e683fb39914f356fb1d8e69accb466a396dc62", "sha256:9aa41c013edd2a6311dcdd4d26129b01b3ba0b08c8adb51759c63501a69d27f5"

ca2b0f26964c 3 weeks ago 78.1MB 3. 镜像摘要 更精确的标识，基于镜像内容的 SHA256 哈希： $ docker images –digests REPOSITORY TAG DIGEST ID nginx latest sha256:6db391d1c0cfb30588ba0bf72ea999404f2764184d8b8d10d89e8a9c6… ‘hello-world:latest’ locally latest: Pulling from library/hello-world b8dfde127a29: Pull complete Digest: sha256:308866a43596e83578c7dfa15e27a73011bdd402185a84c5cd7f32a88b501a24 Status: Downloaded newer image for ‘hello-world:latest’ locally latest: Pulling from library/hello-world b8dfde127a29: Pull complete Digest: sha256:308866a43596e83578c7dfa15e27a73011bdd402185a84c5cd7f32a88b501a24 Status: Downloaded newer image for

04 ca2b0f26964c 3 weeks ago 78.1MB 3. 镜像摘要 更精确的标识，基于镜像内容的 SHA256 哈希： $ docker images –digests REPOSITORY TAG DIGEST IMAGE ID nginx latest sha256:6db391d1c0cfb30588ba0bf72ea999404f2764184d8b8d10d89e8a9c6… ‘hello-world:latest’ locally latest: Pulling from library/hello-world b8dfde127a29: Pull complete Digest: sha256:308866a43596e83578c7dfa15e27a73011bdd402185a84c5cd7f32a88b501a24 Status: Downloaded newer image for ‘hello-world:latest’ locally latest: Pulling from library/hello-world b8dfde127a29: Pull complete Digest: sha256:308866a43596e83578c7dfa15e27a73011bdd402185a84c5cd7f32a88b501a24 Status: Downloaded newer image for

ca2b0f26964c 3 weeks ago 78.1MB 3. 镜像摘要 更精确的标识，基于镜像内容的 SHA256 哈希： $ docker images –digests REPOSITORY TAG DIGEST ID nginx latest sha256:6db391d1c0cfb30588ba0bf72ea999404f2764184d8b8d10d89e8a9c6… ‘hello-world:latest’ locally latest: Pulling from library/hello-world b8dfde127a29: Pull complete Digest: sha256:308866a43596e83578c7dfa15e27a73011bdd402185a84c5cd7f32a88b501a24 Status: Downloaded newer image for ‘hello-world:latest’ locally latest: Pulling from library/hello-world b8dfde127a29: Pull complete Digest: sha256:308866a43596e83578c7dfa15e27a73011bdd402185a84c5cd7f32a88b501a24 Status: Downloaded newer image for

--+--+--+--+--+--+--+--+ 601.079685| cloud-init-1288|: ! .. ! 601.079717| cloud-init-1288|: +----SHA256|----+ 601.079748| cloud-init-1288|: Generating public/private ed25519 key pair. 601.079782| cloud-init-1288|: 5519_key.pub 601.079847| cloud-init-1288|: The key fingerprint is: 601.079879| cloud-init-1288|: SHA256:yWsZ/5+7u7D3SIcd7HYnyajXyeWnt5nQ+ZI3So3beN8 root$ubuntu-server 601.079911| cloud-init-1288|: The cloud-init-1288|: ! . oo+&B%! 601.080244| cloud-init-1288|: ! .. o*%/E! 601.080289| cloud-init-1288|: +----SHA256|----+ 612.293731| cloud-init-2027|: Cloud-init v. 20.2-45-g5f7825e2-0ubuntu1 running 'modules:config'

提供证书。如果您没有现有的可信证书颁发机构，您可以生成自签名证书： $ cd /opt/registry/certs # openssl req -newkey rsa:4096 -nodes -sha256 -keyout domain.key -x509 -days 365 -out domain.crt 在提示符处，为证书提供所需的值： |国家/地区名称（双字母代码）|指定您所在位置的双字母 :47463d94eb5c049b2d23b03a9530bf944f8f967a0fe79147dd6b9135bf7dd13d generation: 2 image: sha256:909de62d1f609a717ec433cc25ca5cf00941545c83a01fb31527771e1fab3fc5 - created: 2017-09-29T13:40:11Z :909de62d1f609a717ec433cc25ca5cf00941545c83a01fb31527771e1fab3fc5 generation: 1 image: sha256:47463d94eb5c049b2d23b03a9530bf944f8f967a0fe79147dd6b9135bf7dd13d tag: latest ![Image](/up

sample@sha256:47463d94eb5c049b2d23b03a9530bf944f8f967a0fe79147dd6b9135bf7dd13d generation: 2 image: sha256:909de62d1f609a717ec433cc25ca5cf00941545c83a01fb31527771e1fab3fc5 - created: 2017-09-01T13:40:11Z sample@sha256:909de62d1f609a717ec433cc25ca5cf00941545c83a01fb31527771e1fab3fc5 generation: 1 image: sha256:47463d94eb5c049b2d23b03a9530bf944f8f967a0fe79147dd6b9135bf7dd13d tag: latest ![Image](/up @sha256:47463d94eb5c049b2d23b03a9530bf944f8f967a0fe79147dd6b9135bf7dd13d-generation:2 image: sha256:909de62d1f609a717ec433cc25ca5cf00941545c83a01fb31527771e1fab3fc5-created:2017-09-01T13:40:11Z

'hello-world:latest' locally latest: Pulling from library/hello-world ca4f61b1923c: Pull complete Digest: sha256:be0cd392e45be79ffeffa6b05338b98ebb16c87b255f48e297ec7f98e123905c Status: Downloaded newer image for 'hello-world:latest' locally latest: Pulling from library/hello-world ca4f61b1923c: Pull complete Digest: sha256:be0cd392e45be79ffeffa6b05338b98ebb16c87b255f48e297ec7f98e123905c Status: Downloaded newer image for 'hello-world:latest' locally latest: Pulling from library/hello-world ca4f61b1923c: Pull complete Digest: sha256:be0cd392e45be79ffeffa6b05338b98ebb16c87b255f48e297ec7f98e123905c Status: Downloaded newer image for

sample@sha256:47463d94eb5c049b2d23b03a9530bf944f8f967a0fe79147dd6b9135bf7dd13d generation: 2 image: sha256:909de62d1f609a717ec433cc25ca5cf00941545c83a01fb31527771e1fab3fc5 - created: 2017-09-01T13:40:11Z sample@sha256:909de62d1f609a717ec433cc25ca5cf00941545c83a01fb31527771e1fab3fc5 generation: 1 image: sha256:47463d94eb5c049b2d23b03a9530bf944f8f967a0fe79147dd6b9135bf7dd13d tag: latest ![Image](/up e@sha256:47463d94eb5c049b2d23b03a9530bf944f8f967a0fe79147dd6b9135bf7dd13d generation: 2 image: sha256:909de62d1f609a717ec433cc25ca5cf00941545c83a01fb31527771e1fab3fc5 - created: 2017-09-01T13:40:11Z