Spring Boot容器配置，使用内置Tomcat并添加HTTPS

Spring Boot容器配置，使用内置Tomcat并添加HTTPS

1.Tomcat

spring boot项目可以内置Tomcat，Jetty等容器。

2.HTTPS

使用java的工具keytool生成一个数字证书，命令如下：

keytool -genkey -alias southwind0 -keyalg RSA -keysize 2048 -keystore sw.pl2 -validity 1000

这就生成了一个别名是southwind0、使用RSA算法加密、密钥长度2048、密钥存放位置当前目录下sw.pl2、密钥有效期1000天的数字证书，在cmd中需要填写信息，设置口令为sw12346。之后将sw.pl2放到根目录，在application.properties中配置如下：

由于spring boot同时不支持http和https，所以我们需要添加一个http跳转https。

HttpJumpConfig.java

package com.sw.demo.config;

import org.apache.catalina.Context;
import org.apache.catalina.connector.Connector;
import org.apache.tomcat.util.descriptor.web.SecurityCollection;
import org.apache.tomcat.util.descriptor.web.SecurityConstraint;
import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;

@Configuration
public class HttpJumpConfig {
    @Bean
    TomcatServletWebServerFactory servletContainer(){
        TomcatServletWebServerFactory factory = new TomcatServletWebServerFactory(){
            @Override
            protected void postProcessContext(Context context){
                SecurityConstraint constraint = new SecurityConstraint();
                constraint.setUserConstraint("CONFIDENTIAL"); //confidential
                SecurityCollection collection = new SecurityCollection();
                collection.addPattern("/*");
                constraint.addCollection(collection);
                context.addConstraint(constraint);
            }
        };

        factory.addAdditionalTomcatConnectors(httpConnector());
        return factory;
    }

    private Connector httpConnector(){
        //访问http的80端口，跳转到8088
        Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
        connector.setScheme("http");
        connector.setPort(80);
        connector.setSecure(true);
        connector.setRedirectPort(8088);
        return connector;
    }
}

测试如下：

https://127.0.0.1:8088/welcome

http://127.0.0.1/welcome