华为云对象存储OBS加密示例_云淘科技
开发过程中,您有任何问题可以在github上提交issue,或者在华为云对象存储服务论坛中发帖求助。
上传对象加密
以下代码展示了在上传对象时使用服务端加密功能:
static void test_put_object_by_aes_encrypt() { // 待上传的buffer char *buffer = "11111111"; // 待上传的buffer的长度 int buffer_size = strlen(buffer); // 上传的对象名 char *key = "put_buffer_aes"; // 创建并初始化option obs_options option; init_obs_options(&option); option.bucket_options.host_name = ""; option.bucket_options.bucket_name = ""; // 认证用的ak和sk硬编码到代码中或者明文存储都有很大的安全风险,建议在配置文件或者环境变量中密文存放,使用时解密,确保安全;本示例以ak和sk保存在环境变量中为例,运行本示例前请先在本地环境中设置环境变量ACCESS_KEY_ID和SECRET_ACCESS_KEY。 // 您可以登录访问管理控制台获取访问密钥AK/SK,获取方式请参见https://support.huaweicloud.com/usermanual-ca/ca_01_0003.html option.bucket_options.access_key = getenv("ACCESS_KEY_ID"); option.bucket_options.secret_access_key = getenv("SECRET_ACCESS_KEY"); option.bucket_options.protocol = OBS_PROTOCOL_HTTPS; // 初始化上传对象属性 obs_put_properties put_properties; init_put_properties(&put_properties); //初始化存储上传数据的结构体 put_buffer_object_callback_data data; memset(&data, 0, sizeof(put_buffer_object_callback_data)); data.put_buffer = buffer; data.buffer_size = buffer_size; //服务端加密 SSE加密 server_side_encryption_params encryption_params; memset(&encryption_params, 0, sizeof(server_side_encryption_params)); encryption_params.ssec_customer_algorithm = "AES256"; encryption_params.ssec_customer_key = "K7QkYpBkM5+hcs27fsNkUnNVaobncnLht/rCB2o/9Cw="; // 设置回调函数 obs_put_object_handler putobjectHandler = { { &response_properties_callback, &put_buffer_complete_callback }, &put_buffer_data_callback }; put_object(&option, key, buffer_size, &put_properties, &encryption_params,&putobjectHandler,&data); if (OBS_STATUS_OK == data.ret_status) { printf("put object by_aes_encrypt successfully. "); } else { printf("put object by_aes_encrypt encryption failed(%s). ", obs_get_status_name(data.ret_status)); } }
下载对象解密
以下代码展示了在下载对象时使用服务端解密功能:
static void test_get_object_by_aes_encrypt() { char *file_name = "./test_by_aes"; char *key = "put_buffer_aes"; obs_object_info object_info; // 创建并初始化option obs_options option; init_obs_options(&option); option.bucket_options.host_name = ""; option.bucket_options.bucket_name = ""; // 认证用的ak和sk硬编码到代码中或者明文存储都有很大的安全风险,建议在配置文件或者环境变量中密文存放,使用时解密,确保安全;本示例以ak和sk保存在环境变量中为例,运行本示例前请先在本地环境中设置环境变量ACCESS_KEY_ID和SECRET_ACCESS_KEY。 // 您可以登录访问管理控制台获取访问密钥AK/SK,获取方式请参见https://support.huaweicloud.com/usermanual-ca/ca_01_0003.html option.bucket_options.access_key = getenv("ACCESS_KEY_ID"); option.bucket_options.secret_access_key = getenv("SECRET_ACCESS_KEY"); option.bucket_options.protocol = OBS_PROTOCOL_HTTPS; // SSE加密的对象下载,需要传入SSE的密钥 server_side_encryption_params encryption_params; memset(&encryption_params, 0, sizeof(server_side_encryption_params)); encryption_params.use_ssec = '1'; encryption_params.ssec_customer_algorithm = "AES256"; encryption_params.ssec_customer_key = "K7QkYpBkM5+hcs27fsNkUnNVaobncnLht/rCB2o/9Cw="; memset(&object_info, 0, sizeof(obs_object_info)); object_info.key =key; get_object_callback_data data; data.ret_status = OBS_STATUS_BUTT; data.outfile = write_to_file(file_name); obs_get_conditions getcondition; memset(&getcondition, 0, sizeof(obs_get_conditions)); init_get_properties(&getcondition); obs_get_object_handler get_object_handler = { { NULL, &get_object_complete_callback}, &get_object_data_callback }; get_object(&option, &object_info, &getcondition, &encryption_params, &get_object_handler, &data); if (OBS_STATUS_OK == data.ret_status) { printf("get object by_aes successfully . "); } else { printf("get object by_aes faied(%s). ", obs_get_status_name(data.ret_status)); } fclose(data.outfile); }
父主题: 服务端加密
同意关联代理商云淘科技,购买华为云产品更优惠(QQ 78315851)
内容没看懂? 不太想学习?想快速解决? 有偿解决: 联系专家