为springboot工程添加license许可

已于 2022-06-10 08:46:57 修改
阅读量2.5k 收藏 7
点赞数
文章标签： spring boot java 后端
于 2022-06-09 16:49:59 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/heshiyuan1406146854/article/details/125205478
版权

将如下类复制到工程中：

为了不影响阅读，这些类的源码放在了文章末尾！！！

cd D:\install\jdl_8u271\bin
# 按顺序执行如下三个命令：
# 利用jdk keytool工具制作证书: todo 该命令过时了，会在不久废弃，有时间换成最新的
keytool -genkeypair -keysize 1024 -validity 3650 -alias "project_xxx.privateKey" -keystore "project_xxx.privateKeys.keystore" -storepass "project_xxx_store_pwdxxxxxxxxxxxxxxxx" -keypass "project_xxx_key_pwdyyyyyyyyyyyyyyyyyyyyyy" -dname "CN=localhost, OU=localhost, O=localhost, L=SH, ST=SH, C=CN"

# 利用jdk keytool工具导出证书文件:
keytool -exportcert -alias "project_xxx.privateKey" -keystore "project_xxx.privateKeys.keystore" -storepass "project_xxx_store_pwdxxxxxxxxxxxxxxxx" -file "project_xxx.certfile.cer"

# 利用jdk keytool工具将证书文件导入到证书库中:
keytool -import -alias "project_xxx.publicCert" -file "project_xxx.certfile.cer" -keystore "project_xxx.publicCerts.keystore" -storepass "project_xxx_store_pwdxxxxxxxxxxxxxxxx"

执行完毕会在D:\install\jdl_8u271\bin下生成如下三个文件：

其中 project_xxx.publicCerts.keystore 是公钥，到时候会和证书文件( 即下面要生成的 E:/license/xxx/project_xxx.license.lic )随项目一同部署到客户服务器上；project_xxx.privateKeys.keystore 是私钥，绝对不要让客户知道。

生成证书文件( E:/license/xxx/project_xxx.license.lic )：

public static void main(String[] args) {
        LicenseCreatorParam param = new LicenseCreatorParam();
        param.setSubject("project_xxx_license");
        param.setPrivateAlias("project_xxx.privateKey");
        param.setKeyPass("project_xxx_key_pwdyyyyyyyyyyyyyyyyyyyyyy");
        param.setStorePass("project_xxx_store_pwdxxxxxxxxxxxxxxxx");
        // 生成的证书的路径
        param.setLicensePath("E:/license/xxx/project_xxx.license.lic");

        # 私钥的路径        
      param.setPrivateKeysStorePath("D:/install/jdl_8u271/bin/project_xxx.privateKeys.keystore");
        try {
            Date issuedTime = new Date();
            # 设置使用时间为60天
            Date expiryTime = new Date(issuedTime.getTime() + 60L * 24L * 3600L * 1000L);
            param.setIssuedTime( issuedTime );
            param.setExpiryTime( expiryTime );
        } catch (Exception e) { e.printStackTrace();}

        LicenseCheckModel licenseCheckModel = new LicenseCheckModel();
        List<String> ipList = new ArrayList<>( 0 );
        List<String> macList = new ArrayList<>();
        macList.add( "xx-xx-xx-xx-xx-xx" );

        licenseCheckModel.setMacAddress(macList);
        param.setLicenseCheckModel(licenseCheckModel);

        LicenseCreator licenseCreator = new LicenseCreator(param);
        licenseCreator.generateLicense();
    }

在你的 bootstrap.yml中添加如下配置：

license:
  subject: project_xxx_license
  publicAlias: project_xxx.publicCert
  storePass: project_xxx_store_pwdxxxxxxxxxxxxxxxx
  licensePath: E:/license/xxx/project_xxx.license.lic #证书文件
  publicKeysStorePath: E:/license/xxx/project_xxx.publicCerts.keystore #公钥

这样项目启动时会安装证书：

 在请求的时候会校验证书：

如果不想安装证书，把这两个地方注释掉即可 。

涉及到的类的源码：

package xxx.intercepter;

import com.alibaba.fastjson.JSONObject;
import xxx.common.api.Result;
import xxx.license.LicenseVerify;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.data.redis.core.RedisTemplate;
import org.springframework.stereotype.Component;
import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import java.io.PrintWriter;

/**
 * @desc 证书校验拦截器
 */
@Component
public class LicenseInterceptor implements HandlerInterceptor {


    @Autowired
    private RedisTemplate<String,Object> redisTemplate;

    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response,Object obj) throws Exception {
        LicenseVerify licenseVerify = new LicenseVerify();
        //校验证书是否有效
        boolean verifyResult = licenseVerify.verify();
        if(verifyResult){
            return true;
        }else{
            // 证书校验失败
            response.setCharacterEncoding("utf-8");
            response.setHeader("Content-Type", "text/html;charset=UTF-8");
            response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
            Result result = new Result();
            result.setSuccess( false );
            result.setMessage( "您的证书无效，请核查服务器是否取得授权或重新申请证书！" );
            PrintWriter writer = response.getWriter();
            writer.print( JSONObject.toJSONString( result ) );
            writer.close();
            return false;
        }
    }

    @Override
    public void afterCompletion(HttpServletRequest request,HttpServletResponse response, Object obj, Exception err) throws Exception {

    }

    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response,Object obj, ModelAndView mav) throws Exception {

    }
}
package xxx.license.bo;

import de.schlichtherle.license.AbstractKeyStoreParam;
import lombok.Getter;
import lombok.Setter;

import java.io.*;

/**
 * @desc 自定义KeyStoreParam，用于将公私钥存储文件存放到其他磁盘位置而不是项目中
 */
@Getter
@Setter
public class CustomKeyStoreParam extends AbstractKeyStoreParam {

    //公钥/私钥在磁盘上的存储路径
    private String storePath;
    //访问秘钥库的密码
    private String storePwd;
    //别称
    private String alias;
    //密钥密码（需要妥善保管，不能让使用者知道）
    private String keyPwd;

    public CustomKeyStoreParam(Class clazz, String resource, String alias, String storePwd, String keyPwd) {
        super(clazz, resource);
        this.storePath = resource;
        this.alias = alias;
        this.storePwd = storePwd;
        this.keyPwd = keyPwd;
    }

    /**
     * 用于将公私钥存储文件存放到其他磁盘位置而不是项目中
     * @return
     * @throws IOException
     */
    @Override
    public InputStream getStream() throws IOException {
        final InputStream in = new FileInputStream(new File(storePath));
        if (null == in){
            throw new FileNotFoundException(storePath);
        }
        return in;
    }
}

package xxx.license.bo;

import xxx.license.os.AbstractServerInfo;
import lombok.Getter;
import lombok.Setter;
import lombok.ToString;
import lombok.extern.slf4j.Slf4j;

import java.io.Serializable;
import java.util.List;

/**
 * @desc 自定义需要校验的License参数
 */
@Setter
@Getter
@ToString
@Slf4j
public class LicenseCheckModel implements Serializable {

    /**
     * 可被允许的IP地址
     */
    // private List<String> ipAddress;

    /**
     * 可被允许的MAC地址
     */
    private List<String> macAddress;

    /**
     * 可被允许的CPU序列号
     */
    // private String cpuSerial;

    /**
     * 可被允许的主板序列号
     */
    // private String mainBoardSerial;

    public static LicenseCheckModel installServerInfo(AbstractServerInfo serverInfo){
        LicenseCheckModel result = new LicenseCheckModel();
        try {
            // result.setIpAddress(serverInfo.getIpAddress());
            result.setMacAddress(serverInfo.getMacAddress());
            // result.setCpuSerial(serverInfo.getCPUSerial());
            // result.setMainBoardSerial(serverInfo.getMainBoardSerial());
        }catch (Exception e){
            log.error("获取服务器硬件信息失败",e);
        }
        return result;
    }
}

package xxx.license.bo;

import lombok.Getter;
import lombok.Setter;
import lombok.ToString;

/**
 * @desc License校验类需要的参数
 */
@Setter
@Getter
@ToString
public class LicenseVerifyParam {

    /**
     * 证书subject
     */
    private String subject;

    /**
     * 公钥别称
     */
    private String publicAlias;

    /**
     * 访问公钥库的密码
     */
    private String storePass;

    /**
     * 证书生成路径
     */
    private String licensePath;

    /**
     * 密钥库存储路径
     */
    private String publicKeysStorePath;

    public LicenseVerifyParam() {

    }

    public LicenseVerifyParam(String subject, String publicAlias, String storePass, String licensePath, String publicKeysStorePath) {
        this.subject = subject;
        this.publicAlias = publicAlias;
        this.storePass = storePass;
        this.licensePath = licensePath;
        this.publicKeysStorePath = publicKeysStorePath;
    }
}

package xxx.license.creater;

import xxx.license.CustomLicenseManager;
import xxx.license.bo.CustomKeyStoreParam;
import de.schlichtherle.license.*;
import lombok.extern.slf4j.Slf4j;

import javax.security.auth.x500.X500Principal;
import java.io.File;
import java.text.MessageFormat;
import java.util.prefs.Preferences;

/**
 * License生成类
 */
@Slf4j
public class LicenseCreator {

    private final static X500Principal DEFAULT_HOLDER_AND_ISSUER = new X500Principal("CN=localhost, OU=localhost, O=localhost, L=SH, ST=SH, C=CN");
    private LicenseCreatorParam param;

    public LicenseCreator(LicenseCreatorParam param) {
        this.param = param;
    }

    /**
     * 生成License证书
     *
     * @return boolean
     */
    public boolean generateLicense() {
        try {
            LicenseManager licenseManager = new CustomLicenseManager(initLicenseParam());
            LicenseContent licenseContent = initLicenseContent();

            licenseManager.store(licenseContent, new File(param.getLicensePath()));
            log.info("证书生成成功！");
            return true;
        } catch (Exception e) {
            log.error(MessageFormat.format("证书生成失败：{0}", param), e);
            return false;
        }
    }

    /**
     * 初始化证书生成参数
     */
    private LicenseParam initLicenseParam() {
        Preferences preferences = Preferences.userNodeForPackage(LicenseCreator.class);

        //设置对证书内容加密的秘钥
        CipherParam cipherParam = new DefaultCipherParam(param.getStorePass());

        KeyStoreParam privateStoreParam = new CustomKeyStoreParam(LicenseCreator.class
                , param.getPrivateKeysStorePath()
                , param.getPrivateAlias()
                , param.getStorePass()
                , param.getKeyPass());

        LicenseParam licenseParam = new DefaultLicenseParam(param.getSubject()
                , preferences
                , privateStoreParam
                , cipherParam);

        return licenseParam;
    }

    /**
     * 设置证书生成正文信息
     */
    private LicenseContent initLicenseContent() {
        LicenseContent licenseContent = new LicenseContent();
        licenseContent.setHolder(DEFAULT_HOLDER_AND_ISSUER);
        licenseContent.setIssuer(DEFAULT_HOLDER_AND_ISSUER);

        licenseContent.setSubject(param.getSubject());
        licenseContent.setIssued(param.getIssuedTime());
        licenseContent.setNotBefore(param.getIssuedTime());
        licenseContent.setNotAfter(param.getExpiryTime());
        licenseContent.setConsumerType(param.getConsumerType());
        licenseContent.setConsumerAmount(param.getConsumerAmount());
        licenseContent.setInfo(param.getDescription());

        //扩展校验服务器硬件信息
        licenseContent.setExtra(param.getLicenseCheckModel());

        return licenseContent;
    }
}

package xxx.license.creater;

import com.fasterxml.jackson.annotation.JsonFormat;
import xxx.license.bo.LicenseCheckModel;
import lombok.Getter;
import lombok.Setter;

import java.io.Serializable;
import java.util.Date;

/**
 * License生成类需要的参数
 */
@Setter
@Getter
public class LicenseCreatorParam implements Serializable {

    private static final long serialVersionUID = -7793154252684580872L;
    /**
     * 证书subject
     */
    private String subject;

    /**
     * 密钥别称
     */
    private String privateAlias;

    /**
     * 密钥密码（需要妥善保管，不能让使用者知道）
     */
    private String keyPass;

    /**
     * 访问秘钥库的密码
     */
    private String storePass;

    /**
     * 证书生成路径
     */
    private String licensePath;

    /**
     * 密钥库存储路径
     */
    private String privateKeysStorePath;

    /**
     * 证书生效时间
     */
    @JsonFormat(pattern = "yyyy-MM-dd HH:mm:ss", timezone = "GMT+8")
    private Date issuedTime = new Date();

    /**
     * 证书失效时间
     */
    @JsonFormat(pattern = "yyyy-MM-dd HH:mm:ss", timezone = "GMT+8")
    private Date expiryTime;

    /**
     * 用户类型
     */
    private String consumerType = "user";

    /**
     * 用户数量
     */
    private Integer consumerAmount = 1;

    /**
     * 描述信息
     */
    private String description = "";

    /**
     * 额外的服务器硬件校验信息
     */
    private LicenseCheckModel licenseCheckModel;

}

package xxx.license.creater;

import com.alibaba.fastjson.JSONObject;
import xxx.license.bo.LicenseCheckModel;
import xxx.license.os.AbstractServerInfo;
import xxx.license.os.LinuxServerInfo;
import xxx.license.os.WindowsServerInfo;

import java.util.ArrayList;
import java.util.Date;
import java.util.List;

public class Test {

    public static void printServerInfo(){
        String osName = System.getProperty("os.name").toLowerCase();
        AbstractServerInfo serverInfo;
        //根据不同操作系统类型选择不同的数据获取方法
        if (osName.startsWith("windows")) {
            serverInfo = new WindowsServerInfo();
        } else if (osName.startsWith("linux")) {
            serverInfo = new LinuxServerInfo();
        }else{//其他服务器类型
            serverInfo = new LinuxServerInfo();
        }
        System.out.println( "服务器信息：" + JSONObject.toJSONString( serverInfo ) );
    }

    public static void main(String[] args) {
        LicenseCreatorParam param = new LicenseCreatorParam();
        param.setSubject("project_xxx_license");
        param.setPrivateAlias("project_xxx.privateKey");
        param.setKeyPass("project_xxx_key_pwdyyyyyyyyyyyyyyyyyyyyyy");
        param.setStorePass("project_xxx_store_pwdxxxxxxxxxxxxxxxx");
        // 生成的证书的路径
        param.setLicensePath("E:/license/xxx/project_xxx.license.lic");
        param.setPrivateKeysStorePath("D:/install/jdl_8u271/bin/project_xxx.privateKeys.keystore");
        try {
            Date issuedTime = new Date();
            Date expiryTime = new Date(issuedTime.getTime() + 60L * 24L * 3600L * 1000L);
            param.setIssuedTime( issuedTime );
            param.setExpiryTime( expiryTime );
        } catch (Exception e) { e.printStackTrace();}

        LicenseCheckModel licenseCheckModel = new LicenseCheckModel();
        List<String> ipList = new ArrayList<>( 0 );
        List<String> macList = new ArrayList<>();
        macList.add( "xx-xx-xx-xx-xx-xx" );

        licenseCheckModel.setMacAddress(macList);
        param.setLicenseCheckModel(licenseCheckModel);

        LicenseCreator licenseCreator = new LicenseCreator(param);
        licenseCreator.generateLicense();
    }
}
package xxx.license.os;

import java.net.InetAddress;
import java.net.NetworkInterface;
import java.net.SocketException;
import java.util.ArrayList;
import java.util.Enumeration;
import java.util.List;

public abstract class AbstractServerInfo {

    /**
     * 获取IP地址
     */
    // todo public abstract List<String> getIpAddress() throws Exception;

    /**
     * 获取Mac地址
     */
    public abstract List<String> getMacAddress() throws Exception;

    /**
     * 获取CPU序列号
     */
    // todo public abstract String getCPUSerial() throws Exception;

    /**
     * 获取主板序列号
     */
    // todo public abstract String getMainBoardSerial() throws Exception;

    /**
     * 获取当前服务器所有符合条件的InetAddress
     */
    protected List<InetAddress> getLocalAllInetAddress() throws Exception {
        List<InetAddress> result = new ArrayList<>(4);

        // 遍历所有的网络接口
        for (Enumeration networkInterfaces = NetworkInterface.getNetworkInterfaces(); networkInterfaces.hasMoreElements(); ) {
            NetworkInterface iface = (NetworkInterface) networkInterfaces.nextElement();
            // 在所有的接口下再遍历IP
            for (Enumeration inetAddresses = iface.getInetAddresses(); inetAddresses.hasMoreElements(); ) {
                InetAddress inetAddr = (InetAddress) inetAddresses.nextElement();

                //排除LoopbackAddress、SiteLocalAddress、LinkLocalAddress、MulticastAddress类型的IP地址
                if (!inetAddr.isLoopbackAddress() /*&& !inetAddr.isSiteLocalAddress()*/
                        && !inetAddr.isLinkLocalAddress() && !inetAddr.isMulticastAddress()) {
                    result.add(inetAddr);
                }
            }
        }
        return result;
    }

    /**
     * 获取某个网络接口的Mac地址
     */
    protected String getMacByInetAddress(InetAddress inetAddr) {
        try {
            byte[] mac = NetworkInterface.getByInetAddress(inetAddr).getHardwareAddress();
            StringBuffer stringBuffer = new StringBuffer();

            for (int i = 0; i < mac.length; i++) {
                if (i != 0) {
                    stringBuffer.append("-");
                }

                //将十六进制byte转化为字符串
                String temp = Integer.toHexString(mac[i] & 0xff);
                if (temp.length() == 1) {
                    stringBuffer.append("0" + temp);
                } else {
                    stringBuffer.append(temp);
                }
            }
            return stringBuffer.toString().toUpperCase();
        } catch (SocketException e) {
            e.printStackTrace();
        }
        return null;
    }
}

package xxx.license.os;

import org.apache.commons.lang3.StringUtils;

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.net.InetAddress;
import java.util.List;
import java.util.stream.Collectors;

public class LinuxServerInfo extends AbstractServerInfo {

    /*@Override
    public List<String> getIpAddress() throws Exception {
        List<String> result = null;

        //获取所有网络接口
        List<InetAddress> inetAddresses = getLocalAllInetAddress();

        if (inetAddresses != null && inetAddresses.size() > 0) {
            result = inetAddresses.stream().map(InetAddress::getHostAddress).distinct().map(String::toLowerCase).collect(Collectors.toList());
        }

        return result;
    }*/

    @Override
    public List<String> getMacAddress() throws Exception {
        List<String> result = null;

        //1. 获取所有网络接口
        List<InetAddress> inetAddresses = getLocalAllInetAddress();

        if (inetAddresses != null && inetAddresses.size() > 0) {
            //2. 获取所有网络接口的Mac地址
            result = inetAddresses.stream().map(this::getMacByInetAddress).distinct().collect(Collectors.toList());
        }

        return result;
    }

   /* @Override
    public String getCPUSerial() throws Exception {
        //序列号
        String serialNumber = "";

        //使用dmidecode命令获取CPU序列号
        String[] shell = {"/bin/bash", "-c", "dmidecode -t processor | grep 'ID' | awk -F ':' '{print $2}' | head -n 1"};
        Process process = Runtime.getRuntime().exec(shell);
        process.getOutputStream().close();

        BufferedReader reader = new BufferedReader(new InputStreamReader(process.getInputStream()));

        String line = reader.readLine().trim();
        if (StringUtils.isNotBlank(line)) {
            serialNumber = line;
        }

        reader.close();
        return serialNumber;
    }*/

    /*@Override
    public String getMainBoardSerial() throws Exception {
        //序列号
        String serialNumber = "";

        //使用dmidecode命令获取主板序列号
        String[] shell = {"/bin/bash", "-c", "dmidecode | grep 'Serial Number' | awk -F ':' '{print $2}' | head -n 1"};
        Process process = Runtime.getRuntime().exec(shell);
        process.getOutputStream().close();

        BufferedReader reader = new BufferedReader(new InputStreamReader(process.getInputStream()));

        String line = reader.readLine().trim();
        if (StringUtils.isNotBlank(line)) {
            serialNumber = line;
        }

        reader.close();
        return serialNumber;
    }*/
}

package xxx.license.os;

import java.net.InetAddress;
import java.util.List;
import java.util.Scanner;
import java.util.stream.Collectors;

public class WindowsServerInfo extends AbstractServerInfo {

    /*@Override
    public List<String> getIpAddress() throws Exception {
        List<String> result = null;

        //获取所有网络接口
        List<InetAddress> inetAddresses = getLocalAllInetAddress();

        if (inetAddresses != null && inetAddresses.size() > 0) {
            result = inetAddresses.stream().map(InetAddress::getHostAddress).distinct().map(String::toLowerCase).collect(Collectors.toList());
        }

        return result;
    }*/

    @Override
    public List<String> getMacAddress() throws Exception {
        List<String> result = null;

        //1. 获取所有网络接口
        List<InetAddress> inetAddresses = getLocalAllInetAddress();

        if (inetAddresses != null && inetAddresses.size() > 0) {
            //2. 获取所有网络接口的Mac地址
            result = inetAddresses.stream().map(this::getMacByInetAddress).distinct().collect(Collectors.toList());
        }

        return result;
    }

    /*@Override
    public String getCPUSerial() throws Exception {
        //序列号
        String serialNumber = "";

        //使用WMIC获取CPU序列号
        Process process = Runtime.getRuntime().exec("wmic cpu get processorid");
        process.getOutputStream().close();
        Scanner scanner = new Scanner(process.getInputStream());

        if (scanner.hasNext()) {
            scanner.next();
        }

        if (scanner.hasNext()) {
            serialNumber = scanner.next().trim();
        }

        scanner.close();
        return serialNumber;
    }*/

   /* @Override
    public String getMainBoardSerial() throws Exception {
        //序列号
        String serialNumber = "";

        //使用WMIC获取主板序列号
        Process process = Runtime.getRuntime().exec("wmic baseboard get serialnumber");
        process.getOutputStream().close();
        Scanner scanner = new Scanner(process.getInputStream());

        if (scanner.hasNext()) {
            scanner.next();
        }

        if (scanner.hasNext()) {
            serialNumber = scanner.next().trim();
        }

        scanner.close();
        return serialNumber;
    }*/
}

package xxx.license;

import com.alibaba.fastjson.JSONObject;
import xxx.license.bo.LicenseCheckModel;
import xxx.license.creater.Test;
import xxx.license.os.AbstractServerInfo;
import xxx.license.os.LinuxServerInfo;
import xxx.license.os.WindowsServerInfo;
import de.schlichtherle.license.*;
import de.schlichtherle.xml.GenericCertificate;
import lombok.NoArgsConstructor;
import org.apache.commons.lang3.StringUtils;

import java.beans.XMLDecoder;
import java.io.BufferedInputStream;
import java.io.ByteArrayInputStream;
import java.io.UnsupportedEncodingException;
import java.util.Date;
import java.util.List;

@NoArgsConstructor
public class CustomLicenseManager extends LicenseManager {
    //XML编码
    private static final String XML_CHARSET = "UTF-8";
    //默认BUFSIZE
    private static final int DEFAULT_BUFSIZE = 8 * 1024;

    public CustomLicenseManager(LicenseParam param) {
        super(param);
    }

    /**
     * 复写create方法
     *
     * @param
     * @return byte[]
     */
    @Override
    protected synchronized byte[] create(
            LicenseContent content,
            LicenseNotary notary)
            throws Exception {
        initialize(content);
        this.validateCreate(content);
        final GenericCertificate certificate = notary.sign(content);
        return getPrivacyGuard().cert2key(certificate);
    }

    /**
     * 复写install方法，其中validate方法调用本类中的validate方法，校验IP地址、Mac地址等其他信息
     *
     * @param
     * @return de.schlichtherle.license.LicenseContent
     */
    @Override
    protected synchronized LicenseContent install(
            final byte[] key,
            final LicenseNotary notary)
            throws Exception {
        final GenericCertificate certificate = getPrivacyGuard().key2cert(key);

        notary.verify(certificate);
        final LicenseContent content = (LicenseContent) this.load(certificate.getEncoded());
        this.validate(content);
        setLicenseKey(key);
        setCertificate(certificate);

        return content;
    }

    /**
     * 复写verify方法，调用本类中的validate方法，校验IP地址、Mac地址等其他信息
     *
     * @param
     * @return de.schlichtherle.license.LicenseContent
     */
    @Override
    protected synchronized LicenseContent verify(final LicenseNotary notary)
            throws Exception {
        GenericCertificate certificate = getCertificate();

        // Load license key from preferences,
        final byte[] key = getLicenseKey();
        if (null == key) {
            throw new NoLicenseInstalledException(getLicenseParam().getSubject());
        }

        certificate = getPrivacyGuard().key2cert(key);
        notary.verify(certificate);
        final LicenseContent content = (LicenseContent) this.load(certificate.getEncoded());
        this.validate(content);
        setCertificate(certificate);

        return content;
    }

    /**
     * 校验生成证书的参数信息
     *
     * @param content 证书正文
     */
    protected synchronized void validateCreate(final LicenseContent content)
            throws LicenseContentException {
        final LicenseParam param = getLicenseParam();

        final Date now = new Date();
        final Date notBefore = content.getNotBefore();
        final Date notAfter = content.getNotAfter();
        if (null != notAfter && now.after(notAfter)) {
            throw new LicenseContentException("证书失效时间不能早于当前时间");
        }
        if (null != notBefore && null != notAfter && notAfter.before(notBefore)) {
            throw new LicenseContentException("证书生效时间不能晚于证书失效时间");
        }
        final String consumerType = content.getConsumerType();
        if (null == consumerType) {
            throw new LicenseContentException("用户类型不能为空");
        }
    }


    /**
     * 复写validate方法，增加IP地址、Mac地址等其他信息校验
     *
     * @param content LicenseContent
     */
    @Override
    protected synchronized void validate(final LicenseContent content)
            throws LicenseContentException {
        //1. 首先调用父类的validate方法
        super.validate(content);

        //2. 然后校验自定义的License参数
        //License中可被允许的参数信息
        // todo 为啥为空
        LicenseCheckModel expectedCheckModel = (LicenseCheckModel) content.getExtra();
        System.out.println(JSONObject.toJSONString( expectedCheckModel ));
        System.out.println( "服务器真实信息：" );
        Test.printServerInfo();
        //当前服务器真实的参数信息
        LicenseCheckModel serverCheckModel = getServerInfos();

        if (expectedCheckModel != null && serverCheckModel != null) {
            //校验IP地址
            /*if (!checkIpAddress(expectedCheckModel.getIpAddress(), serverCheckModel.getIpAddress())) {
                throw new LicenseContentException("当前服务器的IP没在授权范围内");
            }*/

            //校验Mac地址
            if (!checkIpAddress(expectedCheckModel.getMacAddress(), serverCheckModel.getMacAddress())) {
                throw new LicenseContentException("当前服务器的Mac地址没在授权范围内");
            }

            //校验主板序列号
            /*if (!checkSerial(expectedCheckModel.getMainBoardSerial(), serverCheckModel.getMainBoardSerial())) {
                throw new LicenseContentException("当前服务器的主板序列号没在授权范围内");
            }*/

            //校验CPU序列号
            /*if (!checkSerial(expectedCheckModel.getCpuSerial(), serverCheckModel.getCpuSerial())) {
                throw new LicenseContentException("当前服务器的CPU序列号没在授权范围内");
            }*/
        } else {
            // todo win10上报错？？？
            throw new LicenseContentException("不能获取服务器硬件信息");
        }
    }

    /**
     * 重写XMLDecoder解析XML
     *
     * @param encoded XML类型字符串
     * @return java.lang.Object
     */
    private Object load(String encoded) {
        BufferedInputStream inputStream = null;
        XMLDecoder decoder = null;
        try {
            inputStream = new BufferedInputStream(new ByteArrayInputStream(encoded.getBytes(XML_CHARSET)));

            decoder = new XMLDecoder(new BufferedInputStream(inputStream, DEFAULT_BUFSIZE), null, null);

            return decoder.readObject();
        } catch (UnsupportedEncodingException e) {
            e.printStackTrace();
        } finally {
            try {
                if (decoder != null) {
                    decoder.close();
                }
                if (inputStream != null) {
                    inputStream.close();
                }
            } catch (Exception e) {
                e.printStackTrace();
//                logger.error("XMLDecoder解析XML失败",e);
            }
        }

        return null;
    }

    /**
     * 获取当前服务器需要额外校验的License参数
     *
     * @return demo.LicenseCheckModel
     */
    private LicenseCheckModel getServerInfos() {
        //操作系统类型
        String osName = System.getProperty("os.name").toLowerCase();
        AbstractServerInfo abstractServerInfo = null;

        //根据不同操作系统类型选择不同的数据获取方法
        if (osName.startsWith("windows")) {
            abstractServerInfo = new WindowsServerInfo();
        } else if (osName.startsWith("linux")) {
            abstractServerInfo = new LinuxServerInfo();
        } else {//其他服务器类型
            abstractServerInfo = new LinuxServerInfo();
        }

        return LicenseCheckModel.installServerInfo(abstractServerInfo);
    }

    /**
     * 校验当前服务器的IP/Mac地址是否在可被允许的IP范围内<br/>
     * 如果存在IP在可被允许的IP/Mac地址范围内，则返回true
     *
     * @return boolean
     */
    private boolean checkIpAddress(List<String> expectedList, List<String> serverList) {
        if (expectedList != null && expectedList.size() > 0) {
            if (serverList != null && serverList.size() > 0) {
                for (String expected : expectedList) {
                    if (serverList.contains(expected.trim())) {
                        return true;
                    }
                }
            }

            return false;
        } else {
            return true;
        }
    }

    /**
     * 校验当前服务器硬件（主板、CPU等）序列号是否在可允许范围内
     *
     * @return boolean
     */
    private boolean checkSerial(String expectedSerial, String serverSerial) {
        if (StringUtils.isNotBlank(expectedSerial)) {
            if (StringUtils.isNotBlank(serverSerial)) {
                if (expectedSerial.equals(serverSerial)) {
                    return true;
                }
            }

            return false;
        } else {
            return true;
        }
    }

}

package xxx
import xxx.license.bo.LicenseVerifyParam;
import lombok.extern.slf4j.Slf4j;
import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.InitializingBean;
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.ApplicationContext;
import org.springframework.context.ApplicationListener;
import org.springframework.context.event.ContextRefreshedEvent;
import org.springframework.stereotype.Component;

/**
 * 在项目启动时安装证书
 */
@Component
@Slf4j
// public class LicenseCheckListener implements ApplicationListener<ContextRefreshedEvent> {
public class LicenseCheckListener implements InitializingBean {

    /**
     * 证书subject
     */
    @Value("${license.subject}")
    private String subject;

    /**
     * 公钥别称
     */
    @Value("${license.publicAlias}")
    private String publicAlias;

    /**
     * 访问公钥库的密码
     */
    @Value("${license.storePass}")
    private String storePass;

    /**
     * 证书生成路径
     */
    @Value("${license.licensePath}")
    private String licensePath;

    /**
     * 密钥库存储路径
     */
    @Value("${license.publicKeysStorePath}")
    private String publicKeysStorePath;

    /*@Override
    public void onApplicationEvent(ContextRefreshedEvent event) {
        //root application context 没有parent
        ApplicationContext context = event.getApplicationContext().getParent();
        if(context == null){
            this.installLicense();
        }
    }*/

    @Override
    public void afterPropertiesSet() throws Exception {
        // 安装证书
        this.installLicense();
    }

    private void installLicense() {
        if(StringUtils.isNotBlank(licensePath)){
            log.info("++++++++ 开始安装证书 ++++++++");
            LicenseVerifyParam param = new LicenseVerifyParam();
            param.setSubject(subject);
            param.setPublicAlias(publicAlias);
            param.setStorePass(storePass);
            param.setLicensePath(licensePath);
            param.setPublicKeysStorePath(publicKeysStorePath);
            LicenseVerify licenseVerify = new LicenseVerify();
            //安装证书
            try {
                licenseVerify.install(param);
                log.info("++++++++ 证书安装成功 ++++++++");
            } catch (Exception e) {
                e.printStackTrace();
            }
        }
    }
}

package xxx.license;

import de.schlichtherle.license.LicenseManager;
import de.schlichtherle.license.LicenseParam;

public class LicenseManagerHolder {
    private static volatile LicenseManager LICENSE_MANAGER;

    public static LicenseManager getInstance(LicenseParam param){
        if(LICENSE_MANAGER == null){
            synchronized (LicenseManagerHolder.class){
                if(LICENSE_MANAGER == null){
                    LICENSE_MANAGER = new CustomLicenseManager(param);
                }
            }
        }
        return LICENSE_MANAGER;
    }
}

package xxx.license;

import xxx.license.bo.CustomKeyStoreParam;
import xxx.license.bo.LicenseVerifyParam;
import de.schlichtherle.license.*;
import de.schlichtherle.util.ObfuscatedString;
import lombok.extern.slf4j.Slf4j;

import java.io.File;
import java.text.DateFormat;
import java.text.MessageFormat;
import java.text.SimpleDateFormat;
import java.util.prefs.Preferences;

/**
 * License校验类
 */
@Slf4j
public class LicenseVerify {

    private static final String EXC_LICENSE_HAS_EXPIRED = (new ObfuscatedString(new long[]{1000558500458715757L, -6998261911041258483L, -5490039629745846648L, 3561172928787106880L})).toString();

    /**
     * 安装License证书
     */
    public synchronized LicenseContent install(LicenseVerifyParam param) throws Exception {
        LicenseContent result = null;
        DateFormat format = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");

        //1. 安装证书
        try {
            LicenseManager licenseManager = LicenseManagerHolder.getInstance(initLicenseParam(param));
            licenseManager.uninstall();
            result = licenseManager.install(new File(param.getLicensePath()));
            log.info(MessageFormat.format("证书安装成功，证书有效期：{0} - {1}", format.format(result.getNotBefore()), format.format(result.getNotAfter())));
        } catch (LicenseContentException lce) {
            if(EXC_LICENSE_HAS_EXPIRED.equals(lce.getMessage())) {
                log.error("证书安装失败，证书已过期！");
            } else {
                log.error("证书安装失败！", lce);
            }
            throw lce;
        } catch (Exception e) {
            log.error("证书安装失败！", e);
            throw e;
        }
        return result;
    }

    /**
     * 校验License证书
     */
    public boolean verify() {
        LicenseManager licenseManager = LicenseManagerHolder.getInstance(null);
        DateFormat format = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");

        //2. 校验证书
        try {
            LicenseContent licenseContent = licenseManager.verify();
//            System.out.println(licenseContent.getSubject());
            log.debug(MessageFormat.format("证书校验通过，证书有效期：{0} - {1}",format.format(licenseContent.getNotBefore()),format.format(licenseContent.getNotAfter())));
            return true;
        } catch (Exception e) {
            log.error("证书校验失败！",e);
            return false;
        }
    }

    /**
     * 初始化证书生成参数
     */
    private LicenseParam initLicenseParam(LicenseVerifyParam param) {
        Preferences preferences = Preferences.userNodeForPackage(LicenseVerify.class);

        CipherParam cipherParam = new DefaultCipherParam(param.getStorePass());

        KeyStoreParam publicStoreParam = new CustomKeyStoreParam(LicenseVerify.class
                , param.getPublicKeysStorePath()
                , param.getPublicAlias()
                , param.getStorePass()
                , null);

        return new DefaultLicenseParam(param.getSubject()
                , preferences
                , publicStoreParam
                , cipherParam);
    }
}

狄龙疤
关注
  • 0
    点赞
  • 踩
  • 7
    收藏
    觉得还不错? 一键收藏
  • 3
    评论
基于SpringBoot校验license
11-27
1.支持mac地址校验 2.支持ip校验 3.支持cup、主板序列号校验 4.支持注册账号数限制
SpringBoot 整合 TrueLicense 实现 License 的授权与服务器许可1
08-03
前言License，即版权许可证，一般用于收费软件给付费用户提供的访问许可证明。根据应用部署位置的不同，一般可以分为以下两种情况讨论：应用部署在开发者自己的云服
【工作记录】springboot应用实现license认证
泽济天下的专栏
11-17 2429
本文记录了springboot应用实现license认证服务端和客户端的过程。
idea必装的插件 Spring Boot Helper 插件（创建 Spring Boot 项目）
q322359的博客
10-23 1万+
idea必装的插件 Spring Boot Helper 插件（创建 Spring Boot 项目）
Java实现License(许可证)--包括详细注释和思路解释及源码文件
最新发布
a1374469523的博客
05-10 1099
确定自己需要校验的属性，用来标识License使用方即表示谁用了你的软件、平台或者是库。在商业软件中，License通常用于限制软件的试用期、功能使用、并发用户数等，以便开发者能够收取相应的费用。将本机代码的激活码和license开始时间及结束时间，当作参数传入creater模块的creater类中。core：为核心模块、creator：为创建License模块、verify：为校验模块。将私钥放入创建License模块的资源文件夹内、将公钥放入License校验文件夹内。获取windos硬件信息。
【已解决】Idea社区版没有Spring Initializr的插件
m0_56485336的博客
09-03 1万+
如果在使用Maven去建立SpringBoot项目的时候会发现在pom.xml中添加依赖的时候报出大量关于spring-boot-start之类的错误，即便是换成阿里云仓库也无法解决，但是如果用Spring Initializr来创建项目，错误迎刃而解。
Springboot学习：安装spring boot helper插件的相关问题
C_Engineer的博客
05-23 3450
在创建spring boot项目时，填写了第一页的项目信息后，无法点击“next”，会提示：“please select at least one dependency”！前面的是插件的版本，中间的是idea的版本（兼容范围），我的idea是2021.2版本的，所以选择安装2022.1.2版本的插件。卸载刚才安装的插件，注意需要卸载插件后点击“应用”，然后重启idea即可卸载成功，不然会卸载不成功。导入并“应用之后”，发现确实有了“spring initializr”这个图标。
springboot 下载安装及其注意事项
qq_53378573的博客
04-06 1105
解决了跟着网上博主安装spring boot出现的版本号不匹配，导致项目无法编译的问题
springboot增加license授权认证
醉鱼的博客
08-17 1635
环境 MacOS 10.14.6JDK1.8 源码链接： https://github.com/zuiyu-main/springboot-demo/tree/master/springboot-license 使用keytool工具生成签名文件 https://mp.weixin.qq.com/s?__biz=MzIwNzYzODIxMw==&mid=2247485388&idx=1&sn=dd51ac189b41c02a65f6df4577f481d4&chksm
java web springboot License生成器 (JAVA源码+图形界面)
09-23
保证java web ,spirngboot,tomcate web安全，可以现在IP，mac,自定义参数，License生成器 (JAVA源码+界面） 其中包括license授权机制的原理和制作license的具体步骤 增加了mac 地址验证
软件许可证（License）设计方案
03-02
软件许可证（License）设计方案
springboot实现web系统Licence验证
08-07
教程请见https://blog.csdn.net/Lammonpeter/article/details/78602862
使用truelicense实现用于JAVA工程license机制（包括license生成和验证）
04-03
使用truelicense实现用于JAVA工程license机制（包括license生成和验证）
Springboot 添加License 以及生成证书和证书验证
a50395967的博客
04-10 1740
storepass：指定私钥库的密码(获取keystore信息所需的密码)# keystore: 指定私钥库文件的名称(生成在当前目录)# keystore：指定私钥库的名称(在当前目录查找)# keypass：指定别名条目的密码(私钥的密码)# storepass: 指定私钥库的密码。# validity：私钥的有效期多少天。# storepass：指定私钥库的密码。# keystore：公钥文件名称。# alias：私钥别称。# alias：私钥别称。# file：证书名称。
IntelliJ IDEA 社区版2021.3配置SpringBoot项目详细教程及错误解决方法
热门推荐
qq_73471456的博客
05-03 1万+
手把手教你使用IDEA社区版2021.3配置SpringBoot项目的详细教程及常见错误解决方法，简单方便，保你学会
社区版Intellij IDEA安装Spring Boot Assistant插件解决yml无提示问题
feinifi的博客
03-09 6424
社区版IDEA安装spring boot assistant插件解决yml无提示问题，类模板设置添加默认注释。
keystore文件_HTTPS之密钥知识与密钥工具Keytool和Keystore-Explorer
weixin_39698217的博客
12-03 449
1 简介之前文章《Springboot整合https原来这么简单》讲解过一些基础的密码学知识和Springboot整合HTTPS。本文将更深入讲解密钥知识和密钥工具。2 密钥知识-非对称加密这部分知识非常重要，理解了关键的密钥知识，才能更好地在工作中去使用。需要注意的是，讲的主要是非对称加密的知识，对称加密比较好理解，就不讲述了。（1）对于非对称加密，密钥分私钥（private key）为公钥（p...
SpringBoot整合TrueLicense实现License的授权与服务器许可
m0_37947644的博客
03-09 1807
license制作
springboot license
08-05
Spring Boot是一个开源框架，其采用了Apache License 2.0许可证，这意味着开发人员可以免费使用、修改和分发Spring Boot框架。Apache License 2.0是一种宽松的许可证，它允许用户在满足一些简单的条件下使用和分发软件。 使用Spring Boot框架，开发人员可以轻松地构建和部署独立的、生产级别的Spring应用程序。由于Spring Boot的许可证是开放源代码的，这意味着开发人员可以根据自己的需求进行定制和修改，无需支付任何费用。开发人员可以根据自己的项目需求，添加新的功能、进行二次开发或者将Spring Boot集成到自己的应用程序中。 另外，Apache License 2.0还允许开发人员将Spring Boot集成到商业软件中，甚至可以将其闭源。这意味着开发人员可以根据自己的业务模式选择性地对代码进行保护，以保护自己的商业利益。 总之，Spring Boot的许可证对于开发人员来说是非常友好的，它提供了极大的灵活性和自由度，使开发人员能够充分利用和定制Spring Boot框架来构建高效、稳定和可扩展的应用程序。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 3
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值