当前位置：首页 > news >正文

Springboot设置Https

news 2025/7/16 4:07:53

1、修改配置文件application.yml，并将*.jks放到resource目录下。

server:port: 8080ssl:key-store: classpath:*.jkskey-store-password: *key-store-type: JKSenabled: truekey-alias: boe.com.cn

2、添加http转https的配置

@Configuration
public class TomcatConfig {@Beanpublic TomcatServletWebServerFactory servletContainer() {TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory() {@Overrideprotected void postProcessContext(Context context) {SecurityConstraint constraint = new SecurityConstraint();constraint.setUserConstraint("CONFIDENTIAL");SecurityCollection collection = new SecurityCollection();collection.addPattern("/*");constraint.addCollection(collection);context.addConstraint(constraint);}};tomcat.addAdditionalTomcatConnectors(httpConnector());return tomcat;}@Beanpublic Connector httpConnector() {Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");connector.setScheme("http");//Connector监听的http的端口号connector.setPort(8082);connector.setSecure(false);//监听到http的端口号后转向到的https的端口号connector.setRedirectPort(8080);return connector;}
}

3、修改pom.xml文件
一般到上一步，本地运行没有什么问题，但是打包会有问题。

<plugin><groupId>org.apache.maven.plugins</groupId><artifactId>maven-resources-plugin</artifactId><version>3.1.0</version><configuration><nonFilteredFileExtensions><!-- 过滤后缀为jks的证书文件 --><nonFilteredFileExtension>jks</nonFilteredFileExtension></nonFilteredFileExtensions></configuration>
</plugin>

此时打包应该没有问题，但是部署时可能会出现端口问题，如果出现就添加一下代码

<resource><directory>src/main/resources</directory><filtering>true</filtering><excludes><!-- 替换成自己的证书文件 --><exclude>*.jks</exclude></excludes>
</resource>
<resource><directory>src/main/resources</directory><filtering>false</filtering><includes><!-- 替换成自己的证书文件 --><include>*.jks</include></includes>
</resource>