[SpringBoot] - SpringBoot配置Http2 & SSL

超、凢脫俗 2023-02-20 02:46 30阅读 0赞

HTTP/2的实现都是强制配置HTTPS

因为Java8不支持HTTP/2，因此使用了Java11

**1. 生成证书的步骤：**

1.  使用Java自带的密钥管理工具生成一份自签名的证书

keytool -genkey -alias undertow -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore keystore.p12 -dname "CN=localhost, OU=localhost, O=localhost, L=cc, ST=cc, C=CN"

**2. 为Spring Boot项目配置HTTPS**

1.  将上面生成的`keystore.p12`复制到项目的resource目录下。
2.  在配置文件`application.yaml`中添加如下配置：

server:
      port: 8080 #https端口，https默认端口为443
      http: 
      	port: 80 #可以省略，因为后面有对应设置
      http2:
        enabled: true
      ssl:
        enabled: true
        key-store: classpath:keystore.p12 # 密钥文件
        key-store-password: ******# 证书密码
        key-store-type: PKCS12 # 证书类型
        protocol: TLSv1.2 # 协议类型
        key-alias: undertow

**3. 设置HTTP自动跳转HTTPS**

SpringBoot 2.x：

@Bean
    public Connector connector(){ 
        Connector connector=new Connector("org.apache.coyote.http11.Http11NioProtocol");
        connector.setScheme("http");
        connector.setPort(80);//Http端口
        connector.setSecure(false);
        connector.setRedirectPort(8080);
        return connector;
    }
    
    @Bean
    public TomcatServletWebServerFactory tomcatServletWebServerFactory(){ 
        TomcatServletWebServerFactory tomcat =new TomcatServletWebServerFactory(){ 
            @Override
            protected void postProcessContext(Context context) { 
                SecurityConstraint securityConstraint=new SecurityConstraint();
                securityConstraint.setUserConstraint("CONFIDENTIAL");
                SecurityCollection collection=new SecurityCollection();
                collection.addPattern("/*");
                securityConstraint.addCollection(collection);
                context.addConstraint(securityConstraint);
            }
        };
        tomcat.addAdditionalTomcatConnectors(connector());
        return tomcat;
    }

SpringBoot 1.x：

@Bean
    public Connector connector(){ 
        Connector connector=new Connector("org.apache.coyote.http11.Http11NioProtocol");
        connector.setScheme("http");
        connector.setPort(80);//Http端口
        connector.setSecure(false);
        connector.setRedirectPort(8080);
        return connector;
    }
    @Bean
    public EmbeddedServletContainerFactory servletContainer() { 
        TomcatEmbeddedServletContainerFactory tomca t= new     TomcatEmbeddedServletContainerFactory() { 
            @Override           
            protected void postProcessContext(Context context) { 
                SecurityConstraint constraint = new SecurityConstraint();
                constraint.setUserConstraint("CONFIDENTIAL");
                SecurityCollection collection = new SecurityCollection();
                collection.addPattern("/*");
                constraint.addCollection(collection);
                context.addConstraint(constraint);
            }
        };
        tomcat.addAdditionalTomcatConnectors( connector ());
        return tomcat;
    }

**JS检测连接是否是HTTP/2**