Spring Boot SSL 已配置，服务器已启动但无法连接到端口

Question

I have tried boot application with recent version,wanted to make the rest api ssl secured, I have done below Created the keystore and put into project classpath, the server got started , no problem with starting,but not able to send request 8080 or 8443, below are the configuration,

server.ssl.key-store=KeyStore.p12 server.ssl.key-store-password=shashank server.ssl.key-alias=mydomain server.ssl.key-password=shashank

 @Bean public TomcatServletWebServerFactory servletContainer() { TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory() { @Override protected void postProcessContext(Context context) { SecurityConstraint securityConstraint = new SecurityConstraint(); securityConstraint.setUserConstraint("CONFIDENTIAL"); SecurityCollection collection = new SecurityCollection(); collection.addPattern("/*"); securityConstraint.addCollection(collection); context.addConstraint(securityConstraint); } }; tomcat.addAdditionalTomcatConnectors(getHttpConnector()); return tomcat; } private Connector getHttpConnector() { Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol"); connector.setScheme("https"); connector.setPort(8080); connector.setSecure(true); connector.setRedirectPort(8443); }

INFO 84898 --- [ main] osbwembedded.tomcat.TomcatWebServer : Tomcat started on port(s): enter image description here 8443 (https) 8080 (https) with context path '/event-processing'

as this is self signed certificate, it says " this certificate is not verfied from third party"

The intention is here is to make https to all rest api's enter image description here

Answer 1

Try out these changes :

Modify application.properties to edit server.ssl.key-store parameter value to keystore.p12 from KeyStore.p12

server.ssl.key-store: keystore.p12

Add the TomcatEmbeddedServletContainerFactory bean to @Configuration class (any one).

 @Bean
  public EmbeddedServletContainerFactory servletContainer() {
    TomcatEmbeddedServletContainerFactory tomcat = new TomcatEmbeddedServletContainerFactory() {
        @Override
        protected void postProcessContext(Context context) {
          SecurityConstraint securityConstraint = new SecurityConstraint();
          securityConstraint.setUserConstraint("CONFIDENTIAL");
          SecurityCollection collection = new SecurityCollection();
          collection.addPattern("/*");
          securityConstraint.addCollection(collection);
          context.addConstraint(securityConstraint);
        }
      };

    tomcat.addAdditionalTomcatConnectors(initiateHttpConnector());
    return tomcat;
  }

  private Connector initiateHttpConnector() {
    Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
    connector.setScheme("http");
    connector.setPort(8080);
    connector.setSecure(false);
    connector.setRedirectPort(8443);

    return connector;
  }

Answer 2

我使用自签名证书遇到了这个问题，并通过在服务器计算机而不是我的本地计算机中创建证书来解决它，因此您应该运行在服务器计算机中创建证书的 keytool 命令并使用 .p12 生成的文件您的项目和一切都会按预期进行。