springboot中.yml 用jasypt 密码加密

1、.yml配置文件中密码改成密文的实现方法

1.1 采取 jasypt 加密，pom引入依赖（外网环境）

<dependency>
     <groupId>com.github.ulisesbocchio</groupId>
     <artifactId>jasypt-spring-boot-starter</artifactId>
     <version>2.1.0</version>
 </dependency>

1.2 如果是内网环境，要额外加入以下两个jar，不然要报异常：FileNotFoundException：com/ulisesbocchio/jasyptspringboot/configuration/EnableEncryptableProper

<dependency>
      <groupId>com.github.ulisesbocchio</groupId>
      <artifactId>jasypt-spring-boot</artifactId>
      <version>2.1.0</version>
</dependency>
<dependency>
      <groupId>org.jasypt</groupId>
      <artifactId>jasypt</artifactId>
      <version>1.9.2</version>
</dependency>

 

1.2 pom引入依赖后maven库中多了两个文件夹

1.3 进入maven库的目录...org\jasypt\jasypt\1.9.2 执行cmd

java -cp jasypt-1.9.2.jar org.jasypt.intf.cli.JasyptPBEStringEncryptionCLI input="abc" password=nidaye algorithm=PBEWithMD5AndDES
java -cp jasypt-1.9.2.jar org.jasypt.intf.cli.JasyptPBEStringDecryptionCLI input="jalnACCDVQ==" password=nidaye algorithm=PBEWithMD5AndDES

 注意：一般采取默认加密即可：PBEWithMD5AndDE

#java -cp jasypt-1.9.2.jar org.jasypt.intf.cli.JasyptPBEStringEncryptionCLI input="真实密码" password=自定义的私钥 algorithm=PBEWithMD5AndDES
#java -cp jasypt-1.9.2.jar org.jasypt.intf.cli.JasyptPBEStringDecryptionCLI input="加密密码" password=自定义的私钥 algorithm=PBEWithMD5AndDES

2、 .yml文件配置

2.1 更改前

  datasource:
    dialect: oracle
    type: com.alibaba.druid.pool.DruidDataSource
    driver-class-name: oracle.jdbc.driver.OracleDriver
    url: jdbc:oracle:thin:@127.0.0.1:1521:orcl
    username: orcl
    password: oracl123456

2.2 更改后

注意：加密密码必须放在 ENC()中，如 ENC(jalnACCDVQ==)

  datasource:
    dialect: oracle
    type: com.alibaba.druid.pool.DruidDataSource
    driver-class-name: oracle.jdbc.driver.OracleDriver
    url: jdbc:oracle:thin:@127.0.0.1:1521:orcl
    username: orcl
    password: ENC(fhUYRSPB26By8ACv1b2w==)



jasypt:
  encryptor:
    password: nidaye #数据库密码自定义的私钥   不可缺少的配置