springboot配置https，以及解决配置后端口占用问题

àì夳堔傛蜴生んèń 2024-03-30 12:27 8阅读 0赞

### 一、生成ssl证书 ###

##### 1、进入本地jdk的bin目录，打开cmd #####

##### 2、输入命令，生成证书 #####

keytool -genkey -alias tomcat -keypass 123456 -keyalg RSA -keysize 1024 -validity 365 -keystore D:/tomcat.keystore -storepass 123456

> alias ：别名  
> keypass ：证书密码  
> keystore ：生成的证书

### 二、配置application.properties文件 ###

server.port=7003
    #jks
    server.ssl.key-store=tomcat.keystore
    server.ssl.key-store-password=123456
    server.ssl.key-password=123456
    server.ssl.key-store-type=JKS
    server.ssl.key-alias=tomcat

### 三、配置类 ###

import org.apache.catalina.Context;
    import org.apache.catalina.connector.Connector;
    import org.apache.tomcat.util.descriptor.web.SecurityCollection;
    import org.apache.tomcat.util.descriptor.web.SecurityConstraint;
    import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    
    /**
     * @author dongxiajun
     * @since 2022-12-26 16:10
     */
    @Configuration
    public class TomcatConfig {
        
        @Bean
        public TomcatServletWebServerFactory servletContainer() {
        
    
            TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory() {
        
                @Override
                protected void postProcessContext(Context context) {
        
                    SecurityConstraint securityConstraint = new SecurityConstraint();
                    securityConstraint.setUserConstraint("CONFIDENTIAL");
                    SecurityCollection collection = new SecurityCollection();
                    collection.addPattern("/*");
                    securityConstraint.addCollection(collection);
                    context.addConstraint(securityConstraint);
                }
            };
            tomcat.addAdditionalTomcatConnectors(initiateHttpConnector());
            return tomcat;
        }
    
        private Connector initiateHttpConnector() {
        
            Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
            connector.setScheme("http");
            //这个标识的是http的端口
            connector.setPort(7004);
            connector.setSecure(false);
            //这个标识的是https的端口内容;
            connector.setRedirectPort(7003);
            return connector;
        }
    }

### 四、出现端口异常的情况 ###

将证书放到resource底下，并在配置文件里面配置：`server.ssl.key-store=classpath:tomcat.keystore`  
解决办法：  
①将证书文件放到项目根目录下  
②配置文件配置：`server.ssl.key-store=tomcat.keystore`