SSL设置春季启动

Question

I have some questions about ssl in spring boot. I have files certifications and private key with extension .crt and .key. how can I get from them right format for settings in spring boot like this

    server.ssl.key-store-type=PKCS12
    server.ssl.key-store=classpath:keystore.p12
    server.ssl.key-store-password=password 
    server.ssl.key-alias=tomcat

Answer 1

To convert a certificate file and private key to PKCS#12(.p12) format, use the below command:

openssl pkcs12 -export -out certificate.p12 -inkey privateKey.key -in certificate.crt -certfile CACert.crt

Please go through the below links for your reference on dealing with https in spring boot.

1. Enable HTTPS in Spring Boot
2. Configure HTTP to HTTPS Redirection in Spring Boot

Answer 2

I found solution. I got keystore use this comand:

    openssl pkcs12 -export -in <mycert.crt> -inkey <mykey.key> -out keystore.p12 -name <alias>

And added keystore into application.properies

    #ssl
    server.port=8443
    server.ssl.enabled=true
    server.ssl.key-store-type=PKCS12
    **server.ssl.key-store=keystore/keystore.p12**
    server.ssl.key-store-password=password
    server.ssl.key-alias=alias

It is correct config. When I use classpath:keystore.p12 it did not work. Maybe it cause that I work with spring boot 2. Then I created external folder and put inside keystore. Now it is working.

Answer 3

另一种选择：如果您没有（或不喜欢？）OpenSSL， https ://keystore-explorer.org/（与 keytool 不同）可以将 privatekey+certs 读入任何类型的 Java 密钥库（PKCS12、JCEKS、JKS等，但 PKCS12 通常是最好的）带有“导入密钥对”图标或菜单项。