SpringBoot配置HTTPS及开发调试

前言

在实际开发过程中，如果后端需要启用https访问，通常项目启动后配置nginx代理再配置https，前端调用时高版本的chrome还会因为证书未信任导致调用失败，通过摸索整理一套开发调试下的https方案，特此分享

后端配置

生成HTTPS密钥

keytool -genkeypair -alias tomcat -keyalg RSA -keysize 2048  -ext "SAN=IP:192.168.1.14" -keypass abcd@1234 -keystore frame.jks -storepass abcd@1234 -validity 360000

SAN需要设置你自己电脑的固定ip

配置SSL访问

这里以2.0.0.RELEASE版本为例

server:ssl:key-store: classpath:systemfile/frame.jkskey-store-password: abcd@1234key-store-type: JKSkey-alias: tomcat

如果需要打包部署测试环境，需要添加以下配置将jks密钥排除在外

<resources><resource><filtering>true</filtering><directory>src/main/resources</directory><excludes><exclude>**/*.jks</exclude></excludes></resource><resource><filtering>false</filtering><directory>src/main/resources</directory><includes><include>**/*.jks</include></includes></resource></resources>

创建TomcatConfig配置信任

@Configuration
public class TomcatConfig {@Beanpublic TomcatServletWebServerFactory servletContainer() {TomcatServletWebServerFactory tomcatServletContainerFactory = new TomcatServletWebServerFactory() {@Overrideprotected void postProcessContext(Context context) {SecurityConstraint constraint = new SecurityConstraint();constraint.setUserConstraint("CONFIDENTIAL");SecurityCollection collection = new SecurityCollection();collection.addPattern("/*");constraint.addCollection(collection);context.addConstraint(constraint);}};tomcatServletContainerFactory.addConnectorCustomizers(new FrameTomcatConnectorCustomizer());return tomcatServletContainerFactory;}
}