springboot使用https

• 服务端

  1. 创建自签名证书
     生成私钥

     openssl genrsa -out jianfaprivate.key 2048
     

     证书请求

     openssl req -key jianfaprivate.key -new -out jianfacertificate.csr
     

     证书签名

     openssl x509 -req -in jianfacertificate.csr -signkey jianfaprivate.key -out jianfacertificate.pem
     

     查看证书

     openssl x509 -in jianfacertificate.pem -text -noout
     

     转换证书格式

     openssl pkcs12 -export -out jianfacertificate.pkcs12 -inkey jianfaprivate.key -in jianfacertificate.pem
     

  2. 把证书导入keystore

     keytool -importkeystore -srckeystore jianfacertificate.pkcs12 -destkeystore jianfa.keystore -deststoretype pkcs12 
     

     keytool -list -keystore jianfa.keystore -v
     

  3. 启动springboot

     application.yml配置

     server:
       ssl:
         key-store: classpath:jianfa.keystore
         key-store-type: PKCS12
         key-password: 123456
         key-store-password: 123456
         key-alias: 1
     

• 客户端（浏览器）

  1. chrome://settings/

     隐私设置和安全性

     管理证书

     导入jianfacertificate.pem
     

  2. 打开浏览器访问https://localhost:8080/hello。