SpringBoot配置Https访问

keytool -genkey -alias springboot-https -keyalg RSA -keysize 2048  -keystore ./https.p12 -validity 365

MacBook-Pro:resources zzs$ keytool -genkey -alias springboot-https -keyalg RSA -keysize 2048  -keystore ./https.p12 -validity 365输入密钥库口令:再次输入新口令:您的名字与姓氏是什么?  [Unknown]:  Zhu您的组织单位名称是什么?  [Unknown]:  Bei您的组织名称是什么?  [Unknown]:  Bei您所在的城市或区域名称是什么?  [Unknown]:  BeiJing您所在的省/市/自治区名称是什么?  [Unknown]:  BeiJing该单位的双字母国家/地区代码是什么?  [Unknown]:  CNCN=Zhu, OU=Bei, O=Bei, L=BeiJing, ST=BeiJing, C=CN是否正确?  [否]:  是
输入 <springboot-https> 的密钥口令        (如果和密钥库口令相同, 按回车):再次输入新口令:
Warning:JKS 密钥库使用专用格式。建议使用 "keytool -importkeystore -srckeystore ./https.p12 -destkeystore ./https.p12 -deststoretype pkcs12" 迁移到行业标准格式 PKCS12。

## 设置SSL访问端口
server.port= 8443
## 设置证书名称（用于加载对应证书）
server.ssl.key-store=https.p12
## 设置证书别名
server.ssl.key-alias=springboot-https
## 设置证书密码，创建证书时设置的密码
server.ssl.key-store-password=123456

@RestControllerpublic class HttpsController {
  @RequestMapping("/")  public String hello(){
    return "Hello Spring-Boot-Https!";  }}

INFO 117 --- [           main] com.secbro2.SpringbootHttpsApplication   : No active profile set, falling back to default profiles: defaultINFO 117 --- [           main] o.s.b.w.embedded.tomcat.TomcatWebServer  : Tomcat initialized with port(s): 8443 (https)INFO 117 --- [           main] o.apache.catalina.core.StandardService   : Starting service [Tomcat]INFO 117 --- [           main] org.apache.catalina.core.StandardEngine  : Starting Servlet engine: [Apache Tomcat/9.0.29]INFO 117 --- [           main] o.a.c.c.C.[Tomcat].[localhost].[/]       : Initializing Spring embedded WebApplicationContextINFO 117 --- [           main] o.s.web.context.ContextLoader            : Root WebApplicationContext: initialization completed in 971 msINFO 117 --- [           main] o.s.s.concurrent.ThreadPoolTaskExecutor  : Initializing ExecutorService 'applicationTaskExecutor'INFO 117 --- [           main] o.s.b.w.embedded.tomcat.TomcatWebServer  : Tomcat started on port(s): 8443 (https) with context path ''INFO 117 --- [           main] com.secbro2.SpringbootHttpsApplication   : Started SpringbootHttpsApplication in 1.877 seconds (JVM running for 2.777)

@Configurationpublic class HttpsConfig {
  @Bean  public ConfigurableServletWebServerFactory webServerFactory() {
    // 手动实例化TomcatServletWebServerFactory对象并重写其postProcessContext方法    TomcatServletWebServerFactory factory = new TomcatServletWebServerFactory() {      @Override      protected void postProcessContext(Context context) {        // 创建安全约束组件        SecurityConstraint constraint = new SecurityConstraint();        // 设置用户约束条件，参数必须以下三种模式：NONE、INTEGRAL、CONFIDENTIAL。        // NONE表示被指定的Web资源不需要任何传输保证；        // Integral表示客户机与服务器之间传送的数据在传送过程中不会被篡改；        // Confidential表示数据在传送过程中被加密。        // 大多数情况下，INTEGRAL或CONFIDENTIAL是使用SSL实现。        constraint.setUserConstraint("CONFIDENTIAL");
        SecurityCollection collection = new SecurityCollection();        collection.addPattern("/");        constraint.addCollection(collection);        context.addConstraint(constraint);      }    };
    factory.addAdditionalTomcatConnectors(httpsConnector());    return factory;  }
  private Connector httpsConnector() {    Connector connector = new Connector(TomcatServletWebServerFactory.DEFAULT_PROTOCOL);    connector.setScheme("http");    // Connector监听的http的端口号    connector.setPort(8080);    connector.setSecure(false);    // 监听到http的端口号后转向到的https的端口号    connector.setRedirectPort(8443);    return connector;  }}

Tomcat initialized with port(s): 8443 (https) 8080 (http)
……
Tomcat started on port(s): 8443 (https) 8080 (http) with context path ''

SecurityConstraint securityConstraint = new SecurityConstraint();securityConstraint.setUserConstraint("NONE");SecurityCollection collection = new SecurityCollection();collection.addPattern("/static/*");securityConstraint.addCollection(collection);context.addConstraint(securityConstraint);