Nginx&Java笔记-Webservice使用HTTPS协议及Spring Boot配置tomcat

ゞ浴缸里的玫瑰 2022-11-26 07:45 56阅读 0赞

这里最后的效果如下：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70][]

并且此处soap:address已经换成了https。

这里使用Nginx相关配置：

server {
            listen 443 ssl;
            server_name webservice.it1995.cn;
            ssl_certificate /root/web/SSL/webservice.it1995.cn.pem;
            ssl_certificate_key /root/web/SSL/webservice.it1995.cn.key;
            ssl_session_timeout 5m;
            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
            ssl_prefer_server_ciphers on;
            location / {
    
                    proxy_set_header Host $host:$server_port;
                    proxy_set_header X-Forwarded-Proto  $scheme;
                    proxy_set_header X-Real-IP $remote_addr;
                    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                    proxy_pass http://127.0.0.1:8087/;
            }
    }

这里是添加这几个头：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70 1][]

在spring boot嵌入式tomcat中配置这里我使用的spring boot 2.x

@Configuration
    public class TomcatConfig {
    
        @Bean
        public TomcatServletWebServerFactory servletContainer() {
    
            TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory();
            RemoteIpValve value = new RemoteIpValve();
            value.setRemoteIpHeader("X-Forwarded-For");
            value.setProtocolHeader("X-Forwarded-Proto");
            value.setProtocolHeaderHttpsValue("https");
            tomcat.addEngineValves(value);
            return tomcat;
        }
    }

即可！！！！

客户端发送：

![20200811083914542.png][]

服务端接收：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70 2][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70]: /images/20221124/727f97f84d324ac180919df4a368431d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70 1]: /images/20221124/afd307e5ac5544b88cc85227a09be43f.png
[20200811083914542.png]: /images/20221124/1d432dd5a1934785b30e02479498131a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxNzg0NDI3NjE_size_16_color_FFFFFF_t_70 2]: /images/20221124/3c484c48bada4b2bba56976f28f40b48.png