spring boot 配置https和SSL

最新推荐文章于 2025-03-26 22:57:24 发布

crazyzhb2012

最新推荐文章于 2025-03-26 22:57:24 发布

阅读量1.3k

点赞数

分类专栏： spring 文章标签： spring ssl

spring 专栏收录该内容

14 篇文章

订阅专栏

本文介绍如何在Spring Boot应用中配置HTTPS支持，包括生成密钥库文件、配置SSL参数及实现HTTP重定向到HTTPS的功能。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

spring boot 配置https|ssl
配置支持https

application.properties

需要生成sample.jks，放在classpath下

参考spring-boot-sample-tomcat-ssl

#tomcat
server.port = 8443
server.ssl.key-store = classpath:sample.jks
server.ssl.key-store-password = secret
server.ssl.key-password = password

此时已可以使用https://localhost:8443

配置同时支持 http

参考tomcat多连接器配置

@Bean
public Integer port() {
    return 8080;
    //return SocketUtils.findAvailableTcpPort();
}
@Bean
public EmbeddedServletContainerFactory servletContainer() {
    TomcatEmbeddedServletContainerFactory tomcat = new                    TomcatEmbeddedServletContainerFactory();
    tomcat.addAdditionalTomcatConnectors(createStandardConnector());
    return tomcat;
}
private Connector createStandardConnector() {
    Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
    connector.setPort(port());
    return connector;
}

此时可以使用http://localhost:8080

如果支持http重定向到https

@Value("${server.port}")
   private int port;
@Bean
   public EmbeddedServletContainerFactory servletContainer() {
       TomcatEmbeddedServletContainerFactory tomcat = new TomcatEmbeddedServletContainerFactory() {
           @Override
           protected void postProcessContext(Context context) {
               SecurityConstraint securityConstraint = new SecurityConstraint();
               securityConstraint.setUserConstraint("CONFIDENTIAL");
               SecurityCollection collection = new SecurityCollection();
               collection.addPattern("/*");
               securityConstraint.addCollection(collection);
               context.addConstraint(securityConstraint);
           }
       };
       tomcat.addAdditionalTomcatConnectors(initiateHttpConnector());
       return tomcat;
   }
   private Connector initiateHttpConnector() {
       Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
       connector.setScheme("http");
       connector.setPort(8080);
       connector.setSecure(false);
       connector.setRedirectPort(port);
       return connector;
   }