parent
7fe72c76ac
commit
c565668c5f
@ -0,0 +1,75 @@
|
||||
package kr.xit.core.spring.config.support;
|
||||
|
||||
import org.apache.catalina.Context;
|
||||
import org.apache.catalina.connector.Connector;
|
||||
import org.apache.tomcat.util.descriptor.web.SecurityCollection;
|
||||
import org.apache.tomcat.util.descriptor.web.SecurityConstraint;
|
||||
import org.springframework.beans.factory.annotation.Value;
|
||||
import org.springframework.boot.autoconfigure.condition.ConditionalOnProperty;
|
||||
import org.springframework.boot.web.embedded.tomcat.TomcatServletWebServerFactory;
|
||||
import org.springframework.boot.web.servlet.server.ServletWebServerFactory;
|
||||
import org.springframework.context.annotation.Bean;
|
||||
import org.springframework.context.annotation.Configuration;
|
||||
|
||||
/**
|
||||
* <pre>
|
||||
* description : Http, Https(SSL) 적용 - 내장 톰캣 SSL use
|
||||
* server.ssl.redirect : false인 경우 HTTP와 SSL 동시 사용
|
||||
* application-https.ymlㅡㄷ 선언 사용
|
||||
* - server.ssl.enabled: true인 경우 활성화(적용)
|
||||
* - server.port : SSL port
|
||||
* - server.http : http port
|
||||
* - server.ssl.redirect : true|false
|
||||
* packageName : kr.xit.core.spring.config.support
|
||||
* fileName : HttpsConnectorConfig
|
||||
* author : julim
|
||||
* date : 2023-11-08
|
||||
* ======================================================================
|
||||
* 변경일 변경자 변경 내용
|
||||
* ----------------------------------------------------------------------
|
||||
* 2023-11-08 julim 최초 생성
|
||||
*
|
||||
* </pre>
|
||||
*/
|
||||
@ConditionalOnProperty(value = "server.ssl.enabled", havingValue = "true", matchIfMissing = false)
|
||||
@Configuration
|
||||
public class HttpsConnectorConfig {
|
||||
@Value("${server.port}")
|
||||
private int SSL_PORT;
|
||||
@Value("${server.http}")
|
||||
private int HTTP_PORT;
|
||||
@Value("${server.ssl.redirect}")
|
||||
private boolean SSL_REDIRECT;
|
||||
@Bean
|
||||
public ServletWebServerFactory servletContainer() {
|
||||
|
||||
TomcatServletWebServerFactory tomcat = null;
|
||||
|
||||
if(SSL_REDIRECT){
|
||||
tomcat = new TomcatServletWebServerFactory() {
|
||||
@Override
|
||||
protected void postProcessContext(Context context) {
|
||||
SecurityConstraint securityConstraint = new SecurityConstraint();
|
||||
securityConstraint.setUserConstraint("CONFIDENTIAL");
|
||||
SecurityCollection collection = new SecurityCollection();
|
||||
collection.addPattern("*");
|
||||
securityConstraint.addCollection(collection);
|
||||
context.addConstraint(securityConstraint);
|
||||
}
|
||||
};
|
||||
}else{
|
||||
tomcat = new TomcatServletWebServerFactory();
|
||||
}
|
||||
tomcat.addAdditionalTomcatConnectors(createSslConnector());
|
||||
return tomcat;
|
||||
}
|
||||
|
||||
private Connector createSslConnector() {
|
||||
Connector connector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
|
||||
connector.setScheme("http");
|
||||
connector.setSecure(false);
|
||||
connector.setPort(HTTP_PORT);
|
||||
if(SSL_REDIRECT) connector.setRedirectPort(SSL_PORT);
|
||||
return connector;
|
||||
}
|
||||
}
|
||||
@ -0,0 +1,17 @@
|
||||
#-----------------------------------------------------------------------
|
||||
# application Https SSL 설정
|
||||
# port가 다른 경우 프로파일 별로 server.port와 server.http 선언
|
||||
#-----------------------------------------------------------------------
|
||||
server:
|
||||
port: 8443
|
||||
ssl:
|
||||
enabled: true
|
||||
key-alias: tomcat
|
||||
key-store-provider: SUN
|
||||
key-store-type: PKCS12
|
||||
key-store-password: xit5811807
|
||||
key-store: classpath:tomcat.p12
|
||||
redirect: false
|
||||
http: 8081
|
||||
http2:
|
||||
enabled: true
|
||||
Binary file not shown.
Loading…
Reference in New Issue