Eureka启用https

本是古典何须时尚 2021-07-24 21:46 397阅读 0赞

**一 代码结构**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70][]

**二 Eureka Server**

1 application.yml

spring:
      profiles:
        active: https

2 application-https.yml

server:
      port: 8761
      ssl:
        enabled: true
        key-store: classpath:server.p12
        key-store-password: springcloud
        key-store-type: PKCS12
        key-alias: server
    eureka:
      instance:
        hostname: localhost
        securePort: ${server.port}
        securePortEnabled: true
        nonSecurePortEnabled: false
        homePageUrl: https://${eureka.instance.hostname}:${server.port}/
        statusPageUrl: https://${eureka.instance.hostname}:${server.port}/
      client:
        registerWithEureka: false
        fetchRegistry: false
        serviceUrl:
          defaultZone: https://${eureka.instance.hostname}:${server.port}/eureka/
      server:
          waitTimeInMsWhenSyncEmpty: 0
          enableSelfPreservation: false

**三 Eureka Client**

1 application.yml

spring:
      profiles:
        active: https

2 application-https.yml

server:
      port: 8081
    
    
    spring:
      application:
        name: client1
    
    
    eureka:
      client:
        securePortEnabled: true
        ssl:
          key-store: client.p12
          key-store-password: client
        serviceUrl:
          defaultZone: https://localhost:8761/eureka/

3 cn.springcloud.book.config.EurekaHttpsClientConfig

package cn.springcloud.book.config;
    
    
    import com.netflix.discovery.DiscoveryClient;
    import com.netflix.discovery.shared.transport.jersey.EurekaJerseyClientImpl;
    import org.apache.http.ssl.SSLContextBuilder;
    import org.springframework.beans.factory.annotation.Value;
    import org.springframework.context.annotation.Bean;
    import org.springframework.context.annotation.Configuration;
    import org.springframework.context.annotation.Profile;
    
    
    import javax.net.ssl.SSLContext;
    import java.io.IOException;
    import java.security.KeyManagementException;
    import java.security.KeyStoreException;
    import java.security.NoSuchAlgorithmException;
    import java.security.cert.CertificateException;
    
    
    /**
    * Created by caibosi on 2018-06-26.
    */
    @Profile({"https"})
    @Configuration
    public class EurekaHttpsClientConfig {
    
    
        @Value("${eureka.client.ssl.key-store}")
        String keyStoreFileName;
    
    
        @Value("${eureka.client.ssl.key-store-password}")
        String keyStorePassword;
    
    
        @Bean
        public DiscoveryClient.DiscoveryClientOptionalArgs discoveryClientOptionalArgs() throws CertificateException, NoSuchAlgorithmException, KeyStoreException, IOException, KeyManagementException {
            EurekaJerseyClientImpl.EurekaJerseyClientBuilder builder = new EurekaJerseyClientImpl.EurekaJerseyClientBuilder();
            builder.withClientName("eureka-https-client");
            SSLContext sslContext = new SSLContextBuilder()
                    .loadTrustMaterial(
                            this.getClass().getClassLoader().getResource(keyStoreFileName),keyStorePassword.toCharArray()
                    )
                    .build();
            builder.withCustomSSL(sslContext);
    
    
            builder.withMaxTotalConnections(10);
            builder.withMaxConnectionsPerHost(10);
    
    
            DiscoveryClient.DiscoveryClientOptionalArgs args = new DiscoveryClient.DiscoveryClientOptionalArgs();
            args.setEurekaJerseyClient(builder.build());
            return args;
        }
    }

**四 启动**

1 启动Eureka Server

mvn spring-boot:run -Dspring.profiles.active=https

2 启动Eureka Client

mvn spring-boot:run -Dspring.profiles.active=https

**五 测试**

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 1][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70]: /images/20210724/97ab37dbb6524872b4766e301090af7a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L2NoZW5ncWl1bWluZw_size_16_color_FFFFFF_t_70 1]: /images/20210724/f743694ea3724e52ab47dd7721792263.png