SM2 证书支持

[ruimya]

The New Feature

支持配置 SM2 证书

Your scenes

已经使用 BabaSSL 编译
CGO_ENABLED=1 go build -tags=BabaSSL
export LD_LIBRARY_PATH=/usr/local/BabaSSL/linux_BabaSSL_lib/lib:$LD_LIBRARY_PATH

并指定了加密套件
"tls_context": {
"status": true,
"cert_chain": "/home/angeek/Workspace/gm-test/certs/sm2/signcert.pem",
"private_key": "/home/angeek/Workspace/gm-test/certs/sm2/signkey.pem",
"cipher_suites": "ECDHE-RSA-SM4-SM3"
}

但使用 SM2 证书时仍然报错
[FATAL] [mosn] [NewMosn] AddListener error:cipher ECDHE-RSA-SM4-SM3 is not supported
[FATAL] [mosn] [NewMosn] AddListener error:x509: unsupported elliptic curve

Your advice

看起来好像仅支持 TLS_SM4_GCM_SM3？并且不能配置 SM2 证书
希望能指导一下如何支持 SM2 证书