spring 配置https

生成jks证书(请安装jdk)

keytool -keystore mykeys.jks -genkey -alias myAlias -keyalg RSA

自己生成的口令要记住，后面配置需要用到

 

然后把生成的jks文件复制到项目目录下，在spring配置文件(application.yml/application.properties)下进行对应ssl配置

 

ssl配置说明：

属性	说明
key-store	keytool 工具生成的 keystore 文件路径。
key-store-password	密码。
key-password	密码。
key-alias	别名

 

 

http自动跳转https 分为两种情况， springboot1.X和springboot2.x是两个不同的类，下面详细说明

 

springboot1.X 用的是 EmbeddedServletContainerFactory，如下：

@Configuration
public class Http2HttpsConfig {


    @Value("${server.http-port}")
    private int httpPort;

    @Value("${server.port}")
    private int httpsPort;

    public Connector connector(){
        Connector connector = new Connector("org.apache.coyote.http11.Http11Nio2Protocol");
        connector.setScheme("http");
        connector.setPort(httpPort);
        connector.setSecure(Boolean.FALSE);
        connector.setRedirectPort(httpsPort);

        return connector;
    }


    @Bean
    public EmbeddedServletContainerFactory embeddedServletContainerFactory(){
        TomcatEmbeddedServletContainerFactory tomcatEmbeddedServletContainerFactory = new TomcatEmbeddedServletContainerFactory(){

            @Override
            protected void postProcessContext(Context context) {
                SecurityConstraint constraint = new SecurityConstraint();
                constraint.setUserConstraint("CONFIDENTIAL");

                SecurityCollection collection = new SecurityCollection();
                collection.addPattern("/");

                constraint.addCollection(collection);
                context.addConstraint(constraint);

            }
        };
        tomcatEmbeddedServletContainerFactory.addAdditionalTomcatConnectors(connector());
        return tomcatEmbeddedServletContainerFactory;
    }
}

 

springboot2.X 用的是 TomcatServletWebServerFactory，如下：

@Configuration
public class Http2HttpsConfig {


    @Value("${server.http-port}")
    private int httpPort;

    @Value("${server.port}")
    private int httpsPort;

    public Connector connector(){
        Connector connector = new Connector("org.apache.coyote.http11.Http11Nio2Protocol");
        connector.setScheme("http");
        connector.setPort(httpPort);
        connector.setSecure(Boolean.FALSE);
        connector.setRedirectPort(httpsPort);

        return connector;
    }


    @Bean
    public TomcatServletWebServerFactory tomcatServletWebServerFactory(){
        TomcatServletWebServerFactory tomcatServletWebServerFactory = new TomcatServletWebServerFactory(){

            @Override
            protected void postProcessContext(Context context) {
                SecurityConstraint constraint = new SecurityConstraint();
                constraint.setUserConstraint("CONFIDENTIAL");

                SecurityCollection collection = new SecurityCollection();
                collection.addPattern("/");

                constraint.addCollection(collection);
                context.addConstraint(constraint);

            }
        };
        tomcatServletWebServerFactory.addAdditionalTomcatConnectors(connector());
        return tomcatServletWebServerFactory;
    }




}