Spring Boot 中基于 URL 的 SSL 证书验证

Question

My requirement is to secure my APIs with SSL using spring boot. I have explored two options

      **1. Enable SSL certificate verification for all APIs using application.properties SSL confiuration.
      2. Enable SSL for HTTPS port using application.properties**
      
Is there any way to configure URL(Servlet Path) based SSL certificate verification in Spring boot? .
Like some urls should be consumed by SSL certificate only.

Any help will be greatly appreciated!!!

Answer 1

Like some urls should be consumed by SSL certificate only.

For this one, don't think it is possible. HTTPS stick to specific port and it is only one port. If you deploy your spring boot as Jar and turn on SSL, all connection to that port will be HTTPS. You need to split your app into two apps in this case, one for HTTP and another for HTTPS.

Even you deploy as WAR onto externally provided tomcat, you probably can't run away this, because SSL is restricted to port level. You can refer to this for more if you plan to deploy as WAR.

Updated:

Unless you are ok like what @Sebastian suggested, you can deploy as two port are configured, one is HTTP (80) and another is HTTPS (443). Then you can use http:// and https:// to achieve your objective, although it doesn't sound like what you want here Is there any way to configure URL(Servlet Path) based SSL certificate verification .