Question

要在我的spring-boot应用中启用 https ，我执行了以下操作。

@Bean
@Inject
public EmbeddedServletContainerCustomizer containerCustomizer() throws FileNotFoundException
{
    final String absoluteKeystoreFile = ZenoTuringServiceApp.class.getClassLoader().getResource("test.jks").getFile();

    return (ConfigurableEmbeddedServletContainer factory) -> {
        TomcatEmbeddedServletContainerFactory containerFactory = (TomcatEmbeddedServletContainerFactory) factory;
        containerFactory.addConnectorCustomizers((TomcatConnectorCustomizer) (Connector connector) -> {
            connector.setSecure(true);
            connector.setScheme("https");
            connector.setAttribute("keystoreFile", absoluteKeystoreFile);
            connector.setAttribute("keystorePass", "test");
            connector.setAttribute("keystoreType", "JKS");
            connector.setAttribute("clientAuth", "false");
            connector.setAttribute("sslProtocol", "TLS");
            connector.setAttribute("SSLEnabled", true);
        });
    };
}

如果我使用 mvn spring-boot：run 运行它，它会按预期工作。

但是当我使用java -jar target/xxx-xxx-service-0.1.17-SNAPSHOT.jar的可执行jar运行时，我得到了FileNotFoundException。

Caused by: org.apache.catalina.LifecycleException: service.getName(): "Tomcat";  Protocol handler start failed
        at org.apache.catalina.connector.Connector.startInternal(Connector.java:993)
        at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
        ... 18 common frames omitted

Caused by: java.io.FileNotFoundException: /private/var/folders/wl/xxx77_523z44yjdgx2y7xxxc217h/T/tomcat.8061417798873093914.8091/file:/Users/xxx/Work/Himalay/xxx/xxx-xxx-service/target/xxx-xxx-service-0.1.17-SNAPSHOT.jar!/test.jks (No such file or directory)
        at java.io.FileInputStream.open0(Native Method)
        at java.io.FileInputStream.open(FileInputStream.java:195)
        at java.io.FileInputStream.<init>(FileInputStream.java:138)
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getStore(JSSESocketFactory.java:433)
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeystore(JSSESocketFactory.java:339)
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.getKeyManagers(JSSESocketFactory.java:597)

Answer 1

上面的评论和这段代码帮助了我..

// support loading the JKS from the classpath (to get around Tomcat limitation)
private static File getTuringKeyStoreFile() throws IOException {
    ClassPathResource resource = new ClassPathResource("test.jks");

    // Tomcat won't allow reading File from classpath so read as InputStream into temp File
    File jks = File.createTempFile("ssl_keystore", ".jks");
    InputStream inputStream = resource.getInputStream();
    try {
        FileUtils.copyInputStreamToFile(inputStream, jks);
    } finally {
        IOUtils.closeQuietly(inputStream);
    }

    return jks;
}

参考：https://github.com/robinhowlett/everything-ssl

使用带有spring boot的可执行jar命令时的资源FileNotFoundException

1 个答案: