Spring Boot integrated HTTPS quick start Demo

2 min readApr 17, 2024

1.what is https?

HTTPS，also known as HTTP over TLS。TLS The predecessor of SSL，TLS 1.0 usually marked as SSL 3.1，TLS 1.1 for SSL 3.2，TLS 1.2 for SSL 3.3 HTTPS and HTTP The protocol provides

Data integrity: content transmission is integrity checked
Data Privacy: Content is symmetrically encrypted and a unique encryption key is generated for each connection
Identity authentication: third parties cannot forge the server (client )identity

Among them, data integrity and privacy are provided by TLS Record Protocol Guaranteed, identity authentication is provided by TLS Handshaking Protocols accomplish.

2Certificate preparation

self-signed certificate

keytool -genkey -alias tomcat -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore keystore.p12 -validity 3650

Move the current directory keystore.p12， Put it on your own springboot in the project resource Down

Apply CA Certificate

google Search for free ssl Certificate, I won’t talk about it here.

3.code engineering

Purpose: controller accomplish https access

pom.xml

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
    <parent>
        <artifactId>springboot-demo</artifactId>
        <groupId>com.et</groupId>
        <version>1.0-SNAPSHOT</version>
    </parent>
    <modelVersion>4.0.0</modelVersion>
    <artifactId>https</artifactId>
    <properties>
        <maven.compiler.source>8</maven.compiler.source>
        <maven.compiler.target>8</maven.compiler.target>
    </properties>
    <dependencies>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-web</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-autoconfigure</artifactId>
        </dependency>
        <dependency>
            <groupId>org.springframework.boot</groupId>
            <artifactId>spring-boot-starter-test</artifactId>
            <scope>test</scope>
        </dependency>
    </dependencies>
</project>

controller

package com.et.https.controller;
import org.springframework.stereotype.Controller;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.ResponseBody;
import java.util.HashMap;
import java.util.Map;
@Controller
public class HelloWorldController {
    @RequestMapping("/hello")
    @ResponseBody
    public Map<String, Object> showHelloWorld(){
        Map<String, Object> map = new HashMap<>();
        map.put("msg", "HelloWorld");
        return map;
    }
}

application.yaml

server:
  port: 443
  ssl:
    key-store: classpath:keystore.p12
    key-store-password: 123456
    keyStoreType: PKCS12
    keyAlias: tomcat

http Forward https

@Bean
public TomcatServletWebServerFactory servletContainer() {
   TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory() {
      @Override
      protected void postProcessContext(Context context) {
         SecurityConstraint securityConstraint = new SecurityConstraint();
         securityConstraint.setUserConstraint("CONFIDENTIAL");
         SecurityCollection collection = new SecurityCollection();
         collection.addPattern("/*");
         securityConstraint.addCollection(collection);
         context.addConstraint(securityConstraint);
      }
   };
   tomcat.addAdditionalTomcatConnectors(connector());
   return tomcat;
}
@Bean
public Connector connector() {
   Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
   // 捕获http请求，并将其重定向到443端口
   connector.setScheme("http");
   connector.setPort(80);
   connector.setSecure(false);
   connector.setRedirectPort(443);
   return connector;
}

http and https coexist

@Bean
public ServletWebServerFactory servletContainer() {
   TomcatServletWebServerFactory tomcat = new TomcatServletWebServerFactory();
   tomcat.addAdditionalTomcatConnectors(createStandardConnector());
   return tomcat;
}
private Connector createStandardConnector() {
   Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
   connector.setPort(80);
   return connector;
}

The above are just some key codes. For all codes, please see the code repository below.