SpringBoot2.x配置HTTPS访问的过程

D:\sslca>keytool -genkey -alias tomcat -keypass 12345678 -keyalg RSA -keysize 2048 -validity 365 -keystore ./tomcat.keystore -storepass 12345678
 
您的名字与姓氏是什么?
 
  [Unknown]:  liang
 
您的组织单位名称是什么?
 
  [Unknown]:  aa
 
您的组织名称是什么?
 
  [Unknown]:  bb
 
您所在的城市或区域名称是什么?
 
  [Unknown]:  cc
 
您所在的省/市/自治区名称是什么?
 
  [Unknown]:  dd
 
该单位的双字母国家/地区代码是什么?
 
  [Unknown]:  Ch
 
CN=liang, OU=aa, O=bb, L=cc, ST=dd, C=Ch是否正确?
 
  [否]:  y
 
 
Warning:
 
JKS 密钥库使用专用格式。建议使用 "keytool -importkeystore -srckeystore ./tomcat.keystore -destkeystore ./tomcat.keystore -deststoretype pkcs12" 迁移到行业标准格式 PKCS12。
 
D:\sslca>

您的名字与姓氏是什么?
  [Unknown]:  aa
您的组织单位名称是什么?
  [Unknown]:  bb
您的组织名称是什么?
  [Unknown]:  cc
您所在的城市或区域名称是什么?
  [Unknown]:  dd
您所在的省/市/自治区名称是什么?
  [Unknown]:  Ch
该单位的双字母国家/地区代码是什么?
  [Unknown]:  Ch
CN=aa, OU=bb, O=cc, L=dd, ST=Ch, C=Ch是否正确?
  [否]:  y

server:
  port: 8443  #注意，这里是https访问的的端口号
  ssl:
    key-store: file:F:\Study\mywebsite\websiteback\src\main\resources\client.p12
    key-store-password: 12345678
    key-store-type: PKCS12
    key-alias: client

package com.jipson.websiteback;
 
import org.apache.catalina.Context;
import org.apache.catalina.connector.Connector;
import org.apache.tomcat.util.descriptor.web.SecurityCollection;
import org.apache.tomcat.util.descriptor.web.SecurityConstraint;
import org.mybatis.spring.annotation.MapperScan;
import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory;
import org.springframework.context.annotation.Bean;
 
@SpringBootApplication
@MapperScan({"com.jipson.websiteback.dao"})
public class WebsitebackApplication {
	public static void main(String[] args) {
		SpringApplication.run(WebsitebackApplication.class, args);
	}
 
	@Bean
	public TomcatServletWebServerFactory servletContainer() { //springboot2 新变化
 
		TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory() {
 
			@Override
			protected void postProcessContext(Context context) {
 
				SecurityConstraint securityConstraint = new SecurityConstraint();
				securityConstraint.setUserConstraint("CONFIDENTIAL");
				SecurityCollection collection = new SecurityCollection();
				collection.addPattern("/*");
				securityConstraint.addCollection(collection);
				context.addConstraint(securityConstraint);
			}
		};
		tomcat.addAdditionalTomcatConnectors(initiateHttpConnector());
		return tomcat;
	}
 
	private Connector initiateHttpConnector() {
		Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
		connector.setScheme("http");
		connector.setPort(8080);
		connector.setSecure(false);
		connector.setRedirectPort(8443);
		return connector;
	}
}

server:
  port: 8443  #注意，这里是https访问的的端口号
  http:
    port: 8081
  ssl:
    key-store: file:F:\Study\mywebsite\websiteback\src\main\resources\client.p12
    key-store-password: 12345678
    key-store-type: PKCS12
    key-alias: client

import org.apache.catalina.connector.Connector;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory;
import org.springframework.boot.web.servlet.server.ServletWebServerFactory;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
 
@Configuration
public class TomcatConfig {
 
    @Value("${server.http.port}")
    private int httpPort;
 
    @Bean
    public ServletWebServerFactory servletContainer() {
        TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory();
        tomcat.addAdditionalTomcatConnectors(createStandardConnector()); // 添加http
        return tomcat;
    }
 
    private Connector createStandardConnector() {
        Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
        connector.setPort(httpPort);
        return connector;
    }
}