-
-
Save hakimkal/7f74bb314fa5c745df017f0d9a39fef0 to your computer and use it in GitHub Desktop.
How to enable HTTPS in a Spring Boot Application
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Define a custom port instead of the default 8080 | |
| server.port=8443 | |
| # Tell Spring Security (if used) to require requests over HTTPS | |
| security.require-ssl=true | |
| # The format used for the keystore | |
| server.ssl.key-store-type=PKCS12 | |
| # The path to the keystore containing the certificate | |
| server.ssl.key-store=classpath:keystore.p12 | |
| # The password used to generate the certificate | |
| server.ssl.key-store-password=password | |
| # The alias mapped to the certificate | |
| server.ssl.key-alias=tomcat |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| @Configuration | |
| public class ConnectorConfig { | |
| @Bean | |
| public EmbeddedServletContainerFactory servletContainer() { | |
| TomcatEmbeddedServletContainerFactory tomcat = new TomcatEmbeddedServletContainerFactory() { | |
| @Override | |
| protected void postProcessContext(Context context) { | |
| SecurityConstraint securityConstraint = new SecurityConstraint(); | |
| securityConstraint.setUserConstraint("CONFIDENTIAL"); | |
| SecurityCollection collection = new SecurityCollection(); | |
| collection.addPattern("/*"); | |
| securityConstraint.addCollection(collection); | |
| context.addConstraint(securityConstraint); | |
| } | |
| }; | |
| tomcat.addAdditionalTomcatConnectors(getHttpConnector()); | |
| return tomcat; | |
| } | |
| private Connector getHttpConnector() { | |
| Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol"); | |
| connector.setScheme("http"); | |
| connector.setPort(8080); | |
| connector.setSecure(false); | |
| connector.setRedirectPort(8443); | |
| return connector; | |
| } | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment