springcloud configServer 加密配置

素颜马尾好姑娘i 2022-05-14 04:09 216阅读 0赞

### 覆盖JCE ###

JDK6的下载地址：  
[http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html][http_www.oracle.com_technetwork_java_javase_downloads_jce-6-download-429243.html]

JDK7的下载地址：  
[http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html][http_www.oracle.com_technetwork_java_javase_downloads_jce-7-download-432124.html]

JDK8的下载地址：  
[http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html][http_www.oracle.com_technetwork_java_javase_downloads_jce8-download-2133166.html]

下载后，加压文件，把`local_policy.jar`,`US_export_policy.jar`拷贝并覆盖到`$JAVA_HOME/jre/lib/security`

### 设置key/keystore ###

设置key

在`application.properties`设置对应的key

而且`encrypt.key`属性配置到`application.yml`文件是不生效的，需要定义在`bootstrap.yml`文件中。

encrypt.key=mykey

*  1

设置keystore

生成keystore

$ keytool -genkeypair -alias mytestkey -keyalg RSA \
      -dname "CN=Web Server,OU=Unit,O=Organization,L=City,S=State,C=US" \
      -keypass changeme -keystore server.jks -storepass letmein

*  1
 *  2
 *  3

修改application.yml

encrypt:
      keyStore:
        location: classpath:/server.jks
        password: letmein
        alias: mytestkey
        secret: changeme

[http_www.oracle.com_technetwork_java_javase_downloads_jce-6-download-429243.html]: http://www.oracle.com/technetwork/java/javase/downloads/jce-6-download-429243.html
[http_www.oracle.com_technetwork_java_javase_downloads_jce-7-download-432124.html]: http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html
[http_www.oracle.com_technetwork_java_javase_downloads_jce8-download-2133166.html]: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html