域名和证书配置

旧城等待， 2022-12-09 01:56 217阅读 0赞

###  **域名注册**  ###

--------------------

**搜索域名**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 1][]

点击加入清单下方会提示选择 ：需要实名认证才能购买 ，购买完成点击控制台

**选择域名**

![20200921100623275.png][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 2][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 3][]

**选择解析  （点击解析）**

![20181214140655813.png][]

** 关联服务器**

![2020092110131135.png][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 4][]

添加就可以了

**如果有公网（需咨询宽带运营商，是否提供公网）**

注意：如果你没有公网跳过

1.  记录值为外网IP也叫公网IP  Linux查看 curl ifconfig.me    百度查看搜索IP公网
2.  win10 cmd 查看 ipconfig 默认网关就是路由管理地址
3.  浏览器输入默认网关地址 进行登录
4.  找到虚拟服务器
5.  ![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 5][]
6.  填写外部端口和内部端口为80，IP为服务器IP及局域网IP地址

## ##

### **SSL证书** ###

--------------------

**返回控制台或搜索ssl**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 6][]

**购买证书**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 7][]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 8][]

**立即购买**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 9][]

**证书申请**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 10][]

下一步：需要和域名绑定验证

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 11][]

域名解析绑定

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 12][]

返回验证即可（校验失败可能需要等待10分钟），域名可以删除这条解析，已经无用了。

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 11][]

验证成功

![20200921104015922.png][]

**证书下载 **

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 13][]

下载 Tomcat 证书

解压为2个文件

*  pfx-password.txt文本为密码
 *  将文件pfx后缀的复制到项目中 
 *  打开cmd
 *  注意： Tomcat 9强制要求证书别名设置为tomcat。 keytool -changealias -keystore xxx.pfx -alias alias -destalias tomcat
 *  keytool -list -v -keystore xxx.pfx  查看文件信息

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 14][]

spring配置

server:
      #https端口(不分离建议使用443端口)
      port: 443
      ssl:
        #tocmcat9强制为tomcat,默认一般为alias
        key-alias: tomcat
        key-store-type: PKCS12
        key-store-provider: SUN
        key-store-password: xxx
        key-store: classpath:xxx.pfx
        ciphers: TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256

新建SSLConfig配置(前后端分离跳过)

@Configuration
    public class SSLConfig {
    
        @Bean
        public TomcatServletWebServerFactory servletContainer() {
            TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory() {
                @Override
                protected void postProcessContext(Context context) {
                    SecurityConstraint securityConstraint = new SecurityConstraint();
                    securityConstraint.setUserConstraint("CONFIDENTIAL");
                    SecurityCollection collection = new SecurityCollection();
                    collection.addPattern("/*");
                    securityConstraint.addCollection(collection);
                    context.addConstraint(securityConstraint);
                }
            };
            tomcat.addAdditionalTomcatConnectors(initiateHttpConnector());
            return tomcat;
        }
    
        private Connector initiateHttpConnector() {
            Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
            connector.setScheme("http");
            //设置http端口为80
            connector.setPort(80);
            connector.setSecure(false);
            //设置https端口8443
            connector.setRedirectPort(443);
            return connector;
        }
    }

**将上传的jar包执行       nohup java -jar  xxx.jar  &**

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70]: /images/20221123/5cb1036c54c542fbb6d602d4f410c55d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 1]: /images/20221123/bf4e20479f954960a4b1253d682f0138.png
[20200921100623275.png]: /images/20221123/b2fe963af9534437ada299b5facedecd.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 2]: /images/20221123/61ab0462437e4a22895de1a78eef3571.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 3]: /images/20221123/dd4e77adcade4565bc4063c36d0e127f.png
[20181214140655813.png]: /images/20221123/b6e7efb1890b4fdf8df9a9ad288a335f.png
[2020092110131135.png]: /images/20221123/77460478d95547479834245e1482d8d3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 4]: /images/20221123/d32a20c484a5442cafe5c3c256e311af.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 5]: /images/20221123/76e6c63dc4e24ee48098be8654d975ce.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 6]: /images/20221123/8041a0dc8c194131a85694746befede9.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 7]: /images/20221123/24de2a631e2049fc9d325fcd0c00c9ad.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 8]: /images/20221123/be748615f3424f838888e944ad0a38bf.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 9]: /images/20221123/5aaf26c0128347dbbe59255017a6f78d.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 10]: /images/20221123/52ba8fc23619445db3ce41a0cf286432.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 11]: /images/20221123/9d70d2d5ebc74facb165a85d5725c90c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 12]: /images/20221123/e840a2e9a3ac42b5bd6721984210be36.png
[20200921104015922.png]: /images/20221123/4e97fd0a28764d03a5dac3a516274a65.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 13]: /images/20221123/d082bc44d95a4279b83733f0b9ced044.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM3MDU5ODM4_size_16_color_FFFFFF_t_70 14]: /images/20221123/bc236cca063d4b00a1d12f394801591c.png