SpringBoot项目中使用Jasypt实现配置文件敏感信息加密

 <dependency>
       <groupId>com.github.ulisesbocchio</groupId>
       <artifactId>jasypt-spring-boot-starter</artifactId>
       <version>2.1.0</version>
</dependency>

public class JasyptUtil {
    public static void main(String[] args) {
        // 1. 创建加密器
        StandardPBEStringEncryptor encryptor = new StandardPBEStringEncryptor();
        EnvironmentPBEConfig config = new EnvironmentPBEConfig();

        // 2. 设置加密密钥
        config.setPassword("secret-key");
        // 3. 设置加密算法（默认算法）
        config.setAlgorithm("PBEWithMD5AndDES");
        encryptor.setConfig(config);

        // 4. 需要加密的明文     如数据库密码、Redis密码
        String plainText = "123456";
        // 5. 生成密文
        String cipherText = encryptor.encrypt(plainText);

        System.out.println("明文：" + plainText);
        System.out.println("加密后的密文：" + cipherText);
        // 解密
        System.out.println("解密后的明文：" + encryptor.decrypt(cipherText));
    }
}

server:
  port: 8080
spring:
  datasource:
    driver-class-name: com.mysql.cj.jdbc.Driver
    url: jdbc:mysql://localhost:3306/testdb?characterEncoding=utf-8&useSSL=false&serverTimezone=UTC
    username: root
    password: 123456
  redis:
    host: localhost
    password: 123456
    database: 0

server:
  port: 8080
spring:
  datasource:
    driver-class-name: com.mysql.cj.jdbc.Driver
    url: jdbc:mysql://localhost:3306/testdb?characterEncoding=utf-8&useSSL=false&serverTimezone=UTC
    username: root
    password: ENC(EXDOlKLjBgXxmhlcUNUc9w==)
  redis:
    host: localhost
    password: ENC(EXDOlKLjBgXxmhlcUNUc9w==)
    database: 0
jasypt:
  encryptor:
    algorithm: PBEWithMD5AndDES
    password: secret-key

jasypt:
  encryptor:
    algorithm: PBEWithMD5AndDES
    password: secret-key

# Jar包启动，传入Jasypt密钥
java -jar your-project.jar --jasypt.encryptor.password=secret-key