Ihar Hancharenka ababf1aa82 m
2025-01-24 18:16:06 +03:00

70 строки
2.7 KiB
Plaintext

https://docs.spring.io/spring-boot/reference/features/ssl.html
keystore - for embedded web server
truststore - to secure client-side connection
https://docs.spring.io/spring-boot/api/java/org/springframework/boot/autoconfigure/ssl/JksSslBundleProperties.html
https://docs.spring.io/spring-boot/api/java/org/springframework/boot/autoconfigure/ssl/SslBundleProperties.html
https://docs.spring.io/spring-boot/api/java/org/springframework/boot/autoconfigure/ssl/SslBundleProperties.Key.html
https://docs.spring.io/spring-boot/api/java/org/springframework/boot/autoconfigure/ssl/SslBundleProperties.Options.html
full list of supported props
https://docs.spring.io/spring-boot/api/java/org/springframework/boot/autoconfigure/ssl/JksSslBundleProperties.Store.html
https://docs.spring.io/spring-boot/api/java/org/springframework/boot/autoconfigure/ssl/PemSslBundleProperties.html
https://docs.spring.io/spring-boot/api/java/org/springframework/boot/ssl/SslBundle.html
https://docs.spring.io/spring-boot/api/java/org/springframework/boot/ssl/SslStoreBundle.html
https://docs.oracle.com/en/java/javase/21/docs/api/java.base/java/security/KeyStore.html
https://docs.oracle.com/en/java/javase/21/docs/api/java.base/javax/net/ssl/SSLContext.html
https://docs.spring.io/spring-boot/reference/io/rest-client.html
https://github.com/spring-projects/spring-boot/tree/main/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/ssl
management.info.ssl.enabled=true
https://github.com/obsidiandynamics/kafdrop/blob/master/src/main/resources/application.yml
server:
ssl:
key-store-type: ${SSL_KEY_STORE_TYPE:PKCS12}
key-store: ${SSL_KEY_STORE:}
key-store-password: ${SSL_KEY_STORE_PASSWORD:}
key-alias: ${SSL_KEY_ALIAS:}
enabled: ${SSL_ENABLED:false}
server:
port: 8443
ssl:
key-store: ./certs/server-cert.pkcs12
key-store-type: pkcs12
key-store-password: <pwd>
keyAlias: 1
...
trust-store
...
bundle:
jks:
<bundle-name>:
key:
alias: server
password: <pwd-val>
keystore:
type: pkcs12
location: ${secrets.server.keyStorePath}
password: <pwd-val>
truststore:
...
reloadOnUpdate: true
pem-format - just encoded in base64
baeldung
https://www.baeldung.com/java-custom-truststore
2024
https://habr.com/ru/companies/sberbank/articles/870116/
!
2023
https://spring.io/blog/2023/11/07/ssl-hot-reload-in-spring-boot-3-2-0
https://spring.io/blog/2023/06/07/securing-spring-boot-applications-with-ssl
2021
https://habr.com/ru/post/593507/
2017
https://reflectoring.io/how%20to%20sign/
certs