<div id="readability-page-1" class="page"><div><h3>mkcert install</h3>
<pre><code>brew install mkcert</code></pre>
<h3>mkcert localhost</h3>
<p>명령어</p>
<ul>
<li><code>mkcert -install [-uninstall 삭제]</code> </li>
</ul>
<pre><code>&gt; mkcert -install
    The local CA is now installed in the system trust store! ⚡️
The local CA is now installed in the Firefox trust store (requires browser restart)! 🦊</code></pre>
<pre><code>&gt; mkcert -pkcs12 localhost

Created a new certificate valid for the following names 📜
 - "localhost"

The PKCS#12 bundle is at "./localhost.p12" ✅

The legacy PKCS#12 encryption password is the often hardcoded default "changeit" ℹ️

It will expire on 26 October 2025 🗓</code></pre>
<pre><code>&gt; mkcert localhost

Created a new certificate valid for the following names 📜
 - "localhost"

The certificate is at "./localhost.pem" and the key at "./localhost-key.pem" ✅

It will expire on 26 October 2025 🗓</code></pre>
<h3>spring boot config - application.yml</h3>
<pre><code>server:  
    port: 8080  
    ssl:  
        enabled: true  
        key-store: classpath:cert/localhost.p12  
        key-store-type: PKCS12  
        key-store-password: changeit # 비밀번호 지정 안한 경우</code></pre>
<h3>HTTPS open feign 오류시</h3>
<p>ref.<br><a href="https://stackoverflow.com/questions/49810760/make-feign-client-to-take-truststore-from-custom-property/49853452#49853452">https://stackoverflow.com/questions/49810760/make-feign-client-to-take-truststore-from-custom-property/49853452#49853452</a></p>
<pre><code>server:
  port: 8080
  ssl:
    enabled: true
    key-store: classpath:cert/localhost.p12
    key-store-type: PKCS12
    key-store-password: changeit
  http2:
    enabled: true</code></pre>
<pre><code>@Component
class FeignClientConfiguration(
    val serverProperties: ServerProperties,
    @Value("\${server.ssl.key-store}") val keyStore: Resource
) {
    @Bean
    @Throws(Exception::class)
    fun feignClient(): Client {
        val keyStorePassword = serverProperties.ssl.keyStorePassword

        return try {
            Client.Default(
                sslSocketFactory(keyStore.inputStream, keyStorePassword),
                null
            )
        } catch (e: Exception) {
            throw Exception("Error in initializing feign client", e)
        }
    }

    @Throws(NoSuchAlgorithmException::class, KeyStoreException::class, CertificateException::class, IOException::class, KeyManagementException::class)
    private fun sslSocketFactory(trustStoreStream: InputStream, trustStorePassword: String): SSLSocketFactory? {
        val sslContext: SSLContext = SSLContext.getInstance("TLSv1.2")
        val tmf = createTrustManager(trustStoreStream, trustStorePassword)
        sslContext.init(arrayOf&lt;KeyManager&gt;(), tmf.trustManagers, null)
        return sslContext.socketFactory
    }

    @Throws(KeyStoreException::class, IOException::class, NoSuchAlgorithmException::class, CertificateException::class)
    private fun createTrustManager(trustStoreStream: InputStream, trustStorePassword: String): TrustManagerFactory {
        val trustStore: KeyStore = KeyStore.getInstance(KeyStore.getDefaultType())
        trustStore.load(trustStoreStream, trustStorePassword.toCharArray())
        val tmf = TrustManagerFactory
            .getInstance(TrustManagerFactory.getDefaultAlgorithm())
        tmf.init(trustStore)
        return tmf
    }
}</code></pre>
<p>위 코드에서 아래처럼 작성 하면 오류가 발생한다. </p>
<pre><code>val keyStoreResource: Resource = ClassPathResource(serverProperties.ssl.keyStore)</code></pre>
<pre><code>Caused by: java.io.FileNotFoundException: class path resource [classpath:cert/localhost.p12] cannot be opened because it does not exist</code></pre>
<p>원인은 그렇다. <code>ClassPathResource</code>를 이용하면,  <code>classpath:</code> prefix가 없는 경로를 써넣어주어야 정상적으로 동작 하게 된다.</p>
<pre><code>@Component
class FeignClientConfiguration(
    @Value("\${server.ssl.key-store}") val keyStore: Resource,
    @Value("\${server.ssl.key-store-password}") val keyStorePassword: String
) {
    @Bean
    @Throws(Exception::class)
    fun feignClient(): Client {
        return try {
            Client.Default(
                sslSocketFactory(keyStore.inputStream, keyStorePassword),
                null
            )
        } catch (e: Exception) {
            throw Exception("Error in initializing feign client", e)
        }
    }

    @Throws(NoSuchAlgorithmException::class, KeyStoreException::class, CertificateException::class, IOException::class, KeyManagementException::class)
    private fun sslSocketFactory(trustStoreStream: InputStream, trustStorePassword: String): SSLSocketFactory? {
        val sslContext: SSLContext = SSLContext.getInstance("TLSv1.2")
        val tmf = createTrustManager(trustStoreStream, trustStorePassword)
        sslContext.init(arrayOf&lt;KeyManager&gt;(), tmf.trustManagers, null)
        return sslContext.socketFactory
    }

    @Throws(KeyStoreException::class, IOException::class, NoSuchAlgorithmException::class, CertificateException::class)
    private fun createTrustManager(trustStoreStream: InputStream, trustStorePassword: String): TrustManagerFactory {
        val trustStore: KeyStore = KeyStore.getInstance(KeyStore.getDefaultType())
        trustStore.load(trustStoreStream, trustStorePassword.toCharArray())
        val tmf = TrustManagerFactory
            .getInstance(TrustManagerFactory.getDefaultAlgorithm())
        tmf.init(trustStore)
        return tmf
    }
}</code></pre>
<p>굳이 <code>ServerProperties</code>를 쓰지 않고, <code>@Value</code>를 이용해서 가져오는 방법도 있다. </p></div></div>

Seungdols Company

seungdols

mkcert install brew install mkcert mkcert localhost 명령어 mkcert -install [-uninstall 삭제] > mkcert -install The local CA is now installed in the system trust store! ⚡️ The local CA is now installed in the Firefox trust store (requires browser restart)!   ..

localhost HTTPS 적용 (spring boot)

댓글