SpringBoot整合HTTPS的项目实践

package org.example;

import java.io.FileInputStream;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.cert.CertificateException;

public class KeystoreExample {
    public static void main(String[] args) {
        String keystorePath = "path/to/your/keystore.p12";
        char[] keystorePassword = "your-keystore-password".toCharArray();

        try (FileInputStream fis = new FileInputStream(keystorePath)) {
            KeyStore keystore = KeyStore.getInstance(KeyStore.getDefaultType());
            keystore.load(fis, keystorePassword);
            System.out.println("密钥库加载成功");
        } catch (java.io.IOException e) {
            System.err.println("密钥库加载失败: " + e.getMessage());
        } catch (NoSuchAlgorithmException | CertificateException | KeyStoreException e) {
            System.err.println("可能是密码错误导致的解密失败");
            e.printStackTrace();
        }
    }
}

keytool -list -v -keystore  keystore.p12

server.port=8081
server.error.path=/log
server.servlet.session.timeout=30s
# 设置应用程序的上下文路径为 /test002。这意味着所有以 /test002 开始的 URL 都将被认为属于这个应用程序。
server.servlet.context-path=/test002
server.tomcat.uri-encoding=UTF-8
server.tomcat.threads.max=500
# 表示秘钥存储库的类型
server.ssl.key-store-type=PKCS12
# 表示 SSL 密钥存储库的名称为 keystore.p12
server.ssl.key-store=classpath:ssl/keystore.p12
# 表示 SSL 密钥别名为 myalias  。
server.ssl.key-alias=myalias
# 这行设置的是 SSL 密钥存储库的密码为 your-password
# 密码不能特别简单，不然项目启动时会出现异常
server.ssl.key-store-password=your-password

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <modelVersion>4.0.0</modelVersion>

    <groupId>org.example</groupId>
    <artifactId>spring_Back</artifactId>
    <version>1.0-SNAPSHOT</version>
    <parent>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-parent</artifactId>
        <version>2.3.9.RELEASE</version>
        <relativePath/>
    </parent>
    <properties>
        <maven.compiler.source>8</maven.compiler.source>
        <maven.compiler.target>8</maven.compiler.target>
        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
    </properties>
    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
    </dependencies>
    
</project>

package org.example.config;
 
import org.apache.catalina.Context;
import org.apache.catalina.connector.Connector;
import org.apache.tomcat.util.descriptor.web.SecurityCollection;
import org.apache.tomcat.util.descriptor.web.SecurityConstraint;
import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

@Configuration
public class TomcatConfig {
    /**
     * 设置 Tomcat 的Server配置
     * @return
     */
    @Bean
    TomcatServletWebServerFactory tomcatServletWebServerFactory(){
        TomcatServletWebServerFactory myFactory = new TomcatServletWebServerFactory(){
            //创建一个安全约束对象
            @Override
            protected void postProcessContext(Context context) {
                SecurityConstraint constraint = new SecurityConstraint();
                constraint.setUserConstraint("CONFIDENTIAL");//设置为机密级别
                SecurityCollection connection = new SecurityCollection();//设置一个安全连接对象
                //作用到所有路由上
                connection.addPattern("/*");
                //加入 connection 对象到安全路由中去
                constraint.addCollection(connection);
                context.addConstraint(constraint);
            }
        };
        //配置HTTPS连接器
        myFactory.addAdditionalTomcatConnectors(createConnector());
        return myFactory;
    }
 
    /**
     * 创建一个连接兼容Https请求
     * @return
     */
    private Connector createConnector(){
        //tomcat 9 中
        //tomcat/conf/server.xml中不要使用org.apache.coyote.http11.Http11AprProtocol
        //要用HTTP/1.1
        Connector connector = new Connector(TomcatServletWebServerFactory.DEFAULT_PROTOCOL);//"HTTP/1.1"
 
        connector.setScheme("http");
        connector.setPort(8080);
        connector.setSecure(false);//关闭ssl检查
        //设置跳转到8081 的端口
        connector.setRedirectPort(8081);
        return connector;
    }
}

package org.example.controller;
 
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;
 
@RestController
public class FirstController {
    @GetMapping("/hey")
    public String hey(){
        return "hey main";
    }
}

package org.example;

import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.EnableAutoConfiguration;
import org.springframework.context.annotation.ComponentScan;

@EnableAutoConfiguration
@ComponentScan
public class MyApp {
    public static void main(String[] args) {
        SpringApplication.run(MyApp.class,args);
    }
}