Spring Boot 集成 Jasypt 3.0.3 配置文件加密
依赖
<dependency>
<groupId>com.github.ulisesbocchio</groupId>
<artifactId>jasypt-spring-boot-starter</artifactId>
<version>3.0.3</version>
</dependency>
1
2
3
4
5
2
3
4
5
yml 中添加配置文件
jasypt:
encryptor:
# 盐加密
password: aabbcc
# 指定加密方式
algorithm: PBEWithMD5AndDES
iv-generator-classname: org.jasypt.iv.NoIvGenerator
1
2
3
4
5
6
7
2
3
4
5
6
7
输出加密密码工具类
package com.aa.cloud.util;
import org.jasypt.encryption.pbe.PooledPBEStringEncryptor;
import org.jasypt.encryption.pbe.config.SimpleStringPBEConfig;
/**
* @author big uncle
* @date 2020/11/23 14:23
* @module
**/
public class JasyptUtil {
/**
* Jasypt生成加密结果
* @param password 配置文件中设定的加密盐值
* @param value 加密值
* @return
*/
public static String encyptPwd(String password,String value){
PooledPBEStringEncryptor encryptor = new PooledPBEStringEncryptor();
encryptor.setConfig(cryptor(password));
String result = encryptor.encrypt(value);
return result;
}
/**
* 解密
* @param password 配置文件中设定的加密盐值
* @param value 解密密文
* @return
*/
public static String decyptPwd(String password,String value){
PooledPBEStringEncryptor encryptor = new PooledPBEStringEncryptor();
encryptor.setConfig(cryptor(password));
String result = encryptor.decrypt(value);
return result;
}
public static SimpleStringPBEConfig cryptor(String password){
SimpleStringPBEConfig config = new SimpleStringPBEConfig();
config.setPassword(password);
config.setAlgorithm("PBEWithMD5AndDES");
config.setKeyObtentionIterations("1000");
config.setPoolSize("1");
config.setProviderName("SunJCE");
config.setSaltGeneratorClassName("org.jasypt.salt.RandomSaltGenerator");
config.setStringOutputType("base64");
return config;
}
public static void main(String[] args) {
// 加密
String encPwd = encyptPwd("giant", "mysql");
// 解密
String decPwd = decyptPwd("giant", encPwd);
System.out.println(encPwd);
System.out.println(decPwd);
}
}
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
得到加密密码进行替换
redis:
host: 192.168.81.101
password: ENC(u1itOZa4Xt3qMyG1VJGa9fc0wDUaQ59/)
database: 0
port: 26379
timeout: 10000
sentinel:
nodes:
- 192.168.81.101:26379
- 192.168.81.102:26379
password: ENC(1iyE4/wqjqSHmFKKVVpLAg==)
master: mymaster
enable: true
lettuce:
pool:
max-wait: 10000
max-active: 30
max-idle: 15
min-idle: 15
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
建议部署的时候 盐 不要放到配置文件，可以用启动参数 -Djasypt.encryptor.password=aabbcc 来替代。
上次更新: 6/11/2025, 4:10:30 PM