spring boot nginx 配置https

最后发布时间:2023-02-27 22:57:08 浏览量:

https://www.lddgo.net/encrypt/ssl

.
├── cert.pem 证书，pem格式。
├── generate.cer 证书，cer格式。
├── generate.P12 PKCS12格式存储的证书，包含私钥。
└── private.key 私钥，pem格式。

cert.pem

private.key

spring boot

server:
  port: 8686                 #https端口
  http:
    port: 8086              #http端口
  ssl:
    key-store: classpath:chengdashi.cn.jks     
    key-store-password: 80s1231jzr              #压缩包解压里面会有
    key-store-type: JKS
    enabled: true

springboot 配置http和https

server:
  compression:
    enabled: true
    mime-types: application/json,application/xml,text/html,text/xml,text/plain,application/javascript
    min-response-size: 50
  tomcat:
    max-threads: 200
    max-connections: 300
  port: 8081
  ssl:
    key-store: classpath:server.keystore #配置证书路径
    key-store-password: 123456 #
    key-store-type: JKS # PKCS12 JKS
http:
  port: 8080

    @Value("${http.port}")
    private Integer httpPort;

    @Value("${server.port}")
    private Integer httpsPort;
    @Bean
    public ServletWebServerFactory servletContainer(){
        final Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
        connector.setPort(httpPort);
        final TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory();

        tomcat.addAdditionalTomcatConnectors(connector);
        return tomcat;
    }

    @Bean
    public ConfigurableServletWebServerFactory webServerFactory() {
        TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory()
        {
            @Override
            protected void postProcessContext(Context context) {
                SecurityConstraint constraint = new SecurityConstraint();
                constraint.setUserConstraint("CONFIDENTIAL");
                SecurityCollection collection = new SecurityCollection();
                collection.addPattern("/*");
                constraint.addCollection(collection);
                context.addConstraint(constraint);
            }
        };
        tomcat.addConnectorCustomizers((TomcatConnectorCustomizer) connector -> connector.setProperty("relaxedQueryChars", "^+|{}[]\\"));
        tomcat.addAdditionalTomcatConnectors(createStandardConnector());

        return tomcat;
    }


    private Connector createStandardConnector() {
        Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
        connector.setScheme("http");
        connector.setPort(httpPort); // 80
        connector.setSecure(false);
        connector.setRedirectPort(httpsPort); //443
        return connector;
    }