使用jdk自带的 keytools 创建自签名证书，并配置SpringBoot SSL采用HTTPS访问，及使用Postman测试时的坑

拼搏现实的明天。 2023-10-11 09:59 27阅读 0赞

参考：[https://www.cnblogs.com/lkc9/p/10665083.html][https_www.cnblogs.com_lkc9_p_10665083.html]

首先生成自签名证书：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ_size_16_color_FFFFFF_t_70][]

查看是否生成：

![20190922162557479.png][]

把生成的key文件丢到classpath下

![20190922162938111.png][]

SpringBoot配置：

#端口号
    server.port=8443
    #你生成的证书名字
    server.ssl.key-store=classpath:keystore.p12
    #密钥库密码
    server.ssl.key-store-password=123456
    server.ssl.key-password=123456
    server.ssl.keyStoreType=PKCS12
    server.ssl.keyAlias=tomcat
    server.http2.enabled=true

相关的Bean的配置：这里需要分SpringBoot的版本【来源参考头部的参考链接】：

SpringBoot1.X

@Bean
    public EmbeddedServletContainerFactory servletContainer() {
    　　TomcatEmbeddedServletContainerFactory tomcat = new TomcatEmbeddedServletContainerFactory() {
    　　　　@Override
    　　　　protected void postProcessContext(Context context) {
    　　　　　　SecurityConstraint securityConstraint = new SecurityConstraint();
    　　　　　　securityConstraint.setUserConstraint("CONFIDENTIAL");
    　　　　　　SecurityCollection collection = new SecurityCollection();
    　　　　　　collection.addPattern("/*");
    　　　　　　securityConstraint.addCollection(collection);
    　　　　　　context.addConstraint(securityConstraint);
    　　　　}
    　　};
    　　tomcat.addAdditionalTomcatConnectors(connector());
    　　return tomcat;
    }
    
    @Bean
    public Connector connector() {
    　　Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
    　　connector.setScheme("http");
    　　connector.setPort(8080);
    　　connector.setSecure(false);
    　　connector.setRedirectPort(8443);
    　　return connector;
    }

SpringBoot2.X

@Bean
    
    public TomcatServletWebServerFactory tomcatServletWebServerFactory(){
    　　TomcatServletWebServerFactory tomcat =new TomcatServletWebServerFactory(){
            @Override
            protected void postProcessContext(Context context) {
    　　　　　　SecurityConstraint securityConstraint=new SecurityConstraint();
            　　securityConstraint.setUserConstraint("CONFIDENTIAL");
            　　SecurityCollection collection=new SecurityCollection();
            　　collection.addPattern("/*");
            　　securityConstraint.addCollection(collection);
            　　context.addConstraint(securityConstraint);
    　　　　}
    　　};
    　　tomcat.addAdditionalTomcatConnectors(connector());
    
    　　return tomcat;
    }
    
    @Bean
    public Connector connector() {
    　　Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
    　　connector.setScheme("http");
    　　connector.setPort(8080);
    　　connector.setSecure(false);
    　　connector.setRedirectPort(8443);
    　　return connector;
    }

主要区别在于Servlet 容器的创建工厂类有所改变

接下来就是使用Postman测试的坑了：一定要去settings里面把圈出来的关闭，否则就会报错，特别是上来就测post请求时，因为测试GET请求在浏览器中没有问题，在Postman里面没有响应，原因就在这里，而在postman里如果没有关闭这项设置发送post请求，后台会报如下错误：

2019-09-22 16:35:58.232 ERROR 8932 --- [nio-8443-exec-1] o.a.coyote.http11.Http11NioProtocol      : Error reading request, ignored
    
    java.lang.NullPointerException: null
    	at org.apache.tomcat.util.net.NioEndpoint$NioSocketWrapper.getSslSupport(NioEndpoint.java:1392) ~[tomcat-embed-core-9.0.24.jar:9.0.24]
    	at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:853) ~[tomcat-embed-core-9.0.24.jar:9.0.24]
    	at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1593) [tomcat-embed-core-9.0.24.jar:9.0.24]
    	at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-embed-core-9.0.24.jar:9.0.24]
    	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [na:1.8.0_144]
    	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [na:1.8.0_144]
    	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-embed-core-9.0.24.jar:9.0.24]
    	at java.lang.Thread.run(Thread.java:748) [na:1.8.0_144]

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ_size_16_color_FFFFFF_t_70 1][]

关闭后请求就好使了：

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ_size_16_color_FFFFFF_t_70 2][]

也可以使用http:localhost:8080/index訪問，他會默認跳轉到https:8443端口

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ_size_16_color_FFFFFF_t_70 3][]

[https_www.cnblogs.com_lkc9_p_10665083.html]: https://www.cnblogs.com/lkc9/p/10665083.html
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20190922162523599.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ==,size_16,color_FFFFFF,t_70
[20190922162557479.png]: https://img-blog.csdnimg.cn/20190922162557479.png
[20190922162938111.png]: https://img-blog.csdnimg.cn/20190922162938111.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20190922163419582.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/20190922163923781.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ_size_16_color_FFFFFF_t_70 3]: https://img-blog.csdnimg.cn/20190922164012166.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80MjQ2NTEyNQ==,size_16,color_FFFFFF,t_70