sprinoot配置https(20210109234942)

1、Spr in gbootssl 配 置一、 內(nèi)置tomcat配置：1生成證書（本地jdk生成），并放到工程下：keytool -ge nkey -alias tomcat -storetype PKCS12 -keyalg RSA -keysize 2048-keystore keystore.p12 -validity 3650-storetype指定密鑰倉庫類型-keyalg生證書的算法名稱，RSA是 一種非對稱加密算法-keysize 證書大小-keystore 生成的證書文件的存儲路徑-validity證書的有效期2、application-dev.yml中修改 tomcat 配置ss

2、l:key-store: classpath:keystore.p12key-store-password: 123456keyStoreType: PKCS12 keyAlias: tomcat如圖啟動工程即可訪問3、配置本工程http 跳轉(zhuǎn)至https在springboot啟動類中增加如下兩個方法Bea npublic EmbeddedServletC ontain erFactory servletCo ntainer() TomcatEmbeddedServletC ontain erFactory tomcat =new TomcatEmbeddedServletCo ntain e

3、rFactory() Overrideprotected void postProcessC on text(C on text con text) SecurityC on strai nt con stra int = new SecurityCo nstrai nt(); con strai nt.setUserCo nstrai (CONFIDENTIAL); SecurityCollectio n collecti on = new SecurityCollecti on(); collectio n.addPattern(/*);con strai nt.addCollectio

4、n(collectio n);con text.addC on strai nt(c on strai nt);tomcat.addAdditio nalTomcatC onn ectors(httpC onn ector();return tomcat;Bea npublic Conn ector httpCo nn ector() Conn ector conn ector =conn ector.setScheme(http);/Connector監(jiān)聽的http的端口號conn ector.setPort(80);conn ector.setSecure(false);/ 監(jiān)聽到http

5、的端口號后轉(zhuǎn)向到的https的端口號conn ector.setRedirectPort(443);retur n conn ector;重新啟動工程，訪問會自動跳轉(zhuǎn)到上外部tomcat配置ssl1、生成證書，方法如同中所述2、修改 tomcat/config/server.xml 中內(nèi)容maxThreads=150 SSLE nabled=true scheme=https secure=true clientAuth=false sslProtocol=TLSkeystoreFile=E:keystore.p12keystorePass=123456/此處配置后重新啟動即可訪問Ssl的默認(rèn)端口是443 （443等同于http的80）3、配置http自動跳轉(zhuǎn)到https修改tomcat/config/server.xml中下圖畫圈部分，修改至 https對應(yīng)的端口修改tomcat/config/web.xml在文件底部前加入下方代碼CLIENT-CERTClie nt Cert Users-only Areav/realm-n amevsecurity-c on stra int vweb-resource-collecti on vweb-resource-n ame SSL vurl-pattern/*v/url-patternv/web-resource-col