springboot添加https

標籤：cto   boot   color   public   text   http   serve   apache   details   

一、使用JDK工具keytool產生認證

keytool命令詳解 77648430

keytool -genkey -alias tomcat -keypass password -storetype PKCS12 -keyalg RSA -keysize 2048 -validity 3650 -keystore keystore.p12 -storepass password -dname "CN=(AMS), OU=(National Innovation Institute of Additive Manufacturing), O=(National Innovation Institute of Additive Manufacturing), L=(Xian), ST=(Shanxi), C=(CN)"

 

二、將產生的檔案copy到src下

三、配置yml檔案

server:
  #https 連接埠  port: 8443  ssl:     key-store: classpath:keystore.p12    key-store-password: password    keyStoreType: PKCS12    keyAlias: tomcat
#http連接埠http:  port: 7000

四、重新導向http到https

在配置類中加入

   /**     * http auto to https     *      * @return     */    @Bean    public EmbeddedServletContainerFactory servletContainer()    {        TomcatEmbeddedServletContainerFactory tomcat = new TomcatEmbeddedServletContainerFactory()        {            @Override            protected void postProcessContext(Context context)            {                SecurityConstraint securityConstraint = new SecurityConstraint();                securityConstraint.setUserConstraint("CONFIDENTIAL");                SecurityCollection collection = new SecurityCollection();                collection.addPattern("/*");                securityConstraint.addCollection(collection);                context.addConstraint(securityConstraint);            }        };        tomcat.addAdditionalTomcatConnectors(httpConnector());        return tomcat;    }    public Connector httpConnector()    {        Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");        connector.setScheme("http");        connector.setPort(7000);//http連接埠重新導向到https連接埠        connector.setSecure(false);        connector.setRedirectPort(8443);        return connector;    }

 

springboot添加https