update crypto kms endpoint

Author: jojoliang

crypto/master_kms_cipher.go

@@ -11,7 +11,7 @@ import (
 	"github.com/tencentyun/cos-go-sdk-v5"
 )
 
-const (
+var (
 	KMSEndPoint = "kms.tencentcloudapi.com"
 )
 
@@ -21,7 +21,15 @@ type MasterKMSCipher struct {
 	MatDesc string
 }
 
-func NewKMSClient(cred *cos.Credential, region string) (*kms.Client, error) {
+type KMSClientOptions = func(*profile.HttpProfile)
+
+func KMSEndpoint(endpoint string) KMSClientOptions {
+	return func(pf *profile.HttpProfile) {
+		pf.Endpoint = endpoint
+	}
+}
+
+func NewKMSClient(cred *cos.Credential, region string, opt ...KMSClientOptions) (*kms.Client, error) {
 	if cred == nil {
 		fmt.Errorf("credential is nil")
 	}
@@ -32,6 +40,10 @@ func NewKMSClient(cred *cos.Credential, region string) (*kms.Client, error) {
 	)
 	cpf := profile.NewClientProfile()
 	cpf.HttpProfile.Endpoint = KMSEndPoint
+
+	for _, fn := range opt {
+		fn(cpf.HttpProfile)
+	}
 	client, err := kms.NewClient(credential, region, cpf)
 	return client, err
 }

example/crypto/crypto_sample.go

@@ -70,7 +70,8 @@ func simple_put_object() {
 	materialDesc := make(map[string]string)
 	//materialDesc["desc"] = "material information of your master encrypt key"
 
-	// 创建KMS客户端
+	// 创建KMS客户端, 可通过 coscrypto.KMSEndpoint 指定KMS域名
+	// kmsclient, _ := coscrypto.NewKMSClient(c.GetCredential(), "ap-guangzhou", coscrypto.KMSEndpoint("kms.internal.tencentcloudapi.com"))
 	kmsclient, _ := coscrypto.NewKMSClient(c.GetCredential(), "ap-guangzhou")
 	// 创建KMS主加密密钥，标识信息和主密钥一一对应
 	kmsID := os.Getenv("KMSID")