1、環境
阿里雲cenos 7.2
tomcat8.5.50
jdk1.8
阿里雲免費申請的ssl證書,tomcat下載:xxxx.pfx以及key.txt
web項目使用springboot2(springboot2以下的話SSLConfig的寫法不太一樣)
2、java項目中
1)新建一個 SSLConfig
2)代碼直接複製
package com.xxx.web.core.config;
import org.apache.catalina.Context;
import org.apache.catalina.connector.Connector;
import org.apache.tomcat.util.descriptor.web.SecurityCollection;
import org.apache.tomcat.util.descriptor.web.SecurityConstraint;
import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
@Configuration
public class SSLConfig {
@Bean
public TomcatServletWebServerFactory servletContainer() { //springboot2 新变化
TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory() {
@Override
protected void postProcessContext(Context context) {
SecurityConstraint securityConstraint = new SecurityConstraint();
securityConstraint.setUserConstraint("CONFIDENTIAL");
SecurityCollection collection = new SecurityCollection();
collection.addPattern("/*");
securityConstraint.addCollection(collection);
context.addConstraint(securityConstraint);
}
};
tomcat.addAdditionalTomcatConnectors(initiateHttpConnector());
return tomcat;
}
private Connector initiateHttpConnector() {
Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
connector.setScheme("http");
connector.setPort(8952); //http端口
connector.setSecure(false);
connector.setRedirectPort(9846); //https端口
return connector;
}
}
3)把xxx.pfx放置到resources下
4)配置application.yml
server:
# 服务器的HTTP端口,默认为80
port: 9846
ssl:
# 证书路径
key-store: classpath:xxx.pfx # 证书的路径
key-store-password: jQM******** # 证书密码,key.txt裏面的内容
然後編譯運行 https://localhost:9846 可以訪問
然後直接發佈到Linux就可以訪問了
3、結尾
阿里雲獲取到免費證書后我搜索了一系列 linux tomcat8.5下配置ssl證書的博客,并且也配置了,結果配置的那個端口只是讓tomcat首頁變成https訪問,所以無奈就換成這種思路最後才讓網站變成https可以訪問的,至於爲啥是繁體,win10更新后就這樣了,雖然輸入法顯示是簡體,真的狗屎