Spring Cloud Config 配置中心 自动加解密功能 JCE方式

1、首先安装JCE

JDK8的下载地址: 
http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html

下载后,解压文件,把local_policy.jar,US_export_policy.jar拷贝并覆盖到$JAVA_HOME/jre/lib/security

2、创建一个工程,pom.xml如下

<?xml version="1.0" encoding="UTF-8"?>
<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
<modelVersion>4.0.0</modelVersion> <groupId>com.thunisoft</groupId>
<artifactId>thunisoft-microservice-config</artifactId>
<version>0.0.1-SNAPSHOT</version>
<packaging>jar</packaging> <name>thunisoft-microservice-config</name>
<description>Demo project for Spring Boot</description> <parent>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-parent</artifactId>
<version>1.5.10.RELEASE</version>
<relativePath/> <!-- lookup parent from repository -->
</parent> <properties>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
<java.version>1.8</java.version>
<spring-cloud.version>Edgware.SR2</spring-cloud.version>
</properties> <dependencies>
<dependency>
<groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-config-server</artifactId>
</dependency>
<dependency>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-starter-test</artifactId>
<scope>test</scope>
</dependency>
</dependencies> <dependencyManagement>
<dependencies>
<dependency>
<groupId>org.springframework.cloud</groupId>
<artifactId>spring-cloud-dependencies</artifactId>
<version>${spring-cloud.version}</version>
<type>pom</type>
<scope>import</scope>
</dependency>
</dependencies>
</dependencyManagement> <build>
<plugins>
<plugin>
<groupId>org.springframework.boot</groupId>
<artifactId>spring-boot-maven-plugin</artifactId>
</plugin>
</plugins>
</build> </project>

  

3、配置启动类:

package com.thunisoft.thunisoftmicroserviceconfig;

import org.springframework.boot.SpringApplication;
import org.springframework.boot.autoconfigure.SpringBootApplication;
import org.springframework.cloud.config.server.EnableConfigServer; @EnableConfigServer
@SpringBootApplication
public class ThunisoftMicroserviceConfigApplication { public static void main(String[] args) {
SpringApplication.run(ThunisoftMicroserviceConfigApplication.class, args);
}
}

  注意 加上 @EnableConfigServer注解。这样才是一个配置服务。

4、创建配置文件:

bootstrap.yml:

encrypt:
key: 12312321

  会用到这个key,记住一定要写在  bootstrap.yml 文件中,否则会报 {"description":"No key was installed for encryption service","status":"NO_KEY"} 这个问题。

  Stack Overflow中的解释:https://*.com/questions/30131598/spring-cloud-config-server-where-to-set-encrypt-key-to-enable-encrypt-endpoin

  意思就是,加解密的时候,会使用  environment 类型 的 encrypt key ,只有在bootstrap中加载encrypt key才会变成环境变量。

application.yml

spring:
application:
name: thunisoft-microservice-configs
cloud:
config:
server:
git:
uri: https://gitee.com/ultrastrong/spring-cloud-config
clone-on-start: true # 启动时候就clone配置仓库
default-application-name: thunisoft-microservice-foo
server:
port: 8979

  

5、启动服务

6、测试:

加密过程:

D:\curl\AMD64>curl -X POST http://localhost:8979/encrypt -d wait_encrypt_test
7b3af354e61440fbd852ebcef2e01656b039008dc41535992496406913fa79ea0c2ebff72cf71f4a9363955db1285d61
D:\curl\AMD64>

解密过程:

D:\curl\AMD64>curl -X POST http://localhost:8979/decrypt -d 7b3af354e61440fbd852ebcef2e01656b039008dc41535992496406913fa79ea0c2ebff72cf71f4a9363955db1285d61
wait_encrypt_test
D:\curl\AMD64>

  

上一篇:使用 shopfiy 模板语言,创建产品模板以搭配购物车实现一键购买


下一篇:Beta版冲刺前准备