SSM数据库账号密码加密

使用SSM框架开发WEB项目时，数据库的账号密码一般会写在dbconfig.properties里，为了做到保护版权等效果，要对数据库账号密码进行加密，一共有分为三步。

一、创建DESUtil类

提供自定义密钥，加密解密的方法。

package com.hzdy.DCAD.common.util;import sun.misc.BASE64Decoder;import sun.misc.BASE64Encoder;import javax.crypto.Cipher;import javax.crypto.KeyGenerator;import java.security.Key;import java.security.SecureRandom;/** * Created by Wongy on 2017/10/30. */public class DESUtil {    private static Key key;    //自己的密钥    private static String KEY_STR = "mykey";    static {        try {            KeyGenerator generator = KeyGenerator.getInstance("DES");            SecureRandom secureRandom = SecureRandom.getInstance("SHA1PRNG");            secureRandom.setSeed(KEY_STR.getBytes());            generator.init(secureRandom);            key = generator.generateKey();            generator = null;        } catch (Exception e) {            throw new RuntimeException(e);        }    }    /**     * 对字符串进行加密，返回BASE64的加密字符串     *     * @param str     * @return     * @see [类、类#方法、类#成员]     */    public static String getEncryptString(String str) {        BASE64Encoder base64Encoder = new BASE64Encoder();        try {            byte[] strBytes = str.getBytes("UTF-8");            Cipher cipher = Cipher.getInstance("DES");            cipher.init(Cipher.ENCRYPT_MODE, key);            byte[] encryptStrBytes = cipher.doFinal(strBytes);            return base64Encoder.encode(encryptStrBytes);        } catch (Exception e) {            throw new RuntimeException(e);        }    }    /**     * 对BASE64加密字符串进行解密     *     */    public static String getDecryptString(String str) {        BASE64Decoder base64Decoder = new BASE64Decoder();        try {            byte[] strBytes = base64Decoder.decodeBuffer(str);            Cipher cipher = Cipher.getInstance("DES");            cipher.init(Cipher.DECRYPT_MODE, key);            byte[] encryptStrBytes = cipher.doFinal(strBytes);            return new String(encryptStrBytes, "UTF-8");        } catch (Exception e) {            throw new RuntimeException(e);        }    }    public static void main(String[] args) {        String name = "root";        String password = "hzdy2016";        String encryname = getEncryptString(name);        String encrypassword = getEncryptString(password);        System.out.println("encryname : " + encryname);        System.out.println("encrypassword : " + encrypassword);        System.out.println("name : " + getDecryptString(encryname));        System.out.println("password : " + getDecryptString(encrypassword));    }}

二、 创建EncryptPropertyPlaceholderConfigurer类

建立与配置文件的关联。

package com.hzdy.DCAD.common.util;import org.springframework.beans.factory.config.PropertyPlaceholderConfigurer;public class EncryptPropertyPlaceholderConfigurer extends PropertyPlaceholderConfigurer {    //属性需与配置文件的KEY保持一直    private String[] encryptPropNames = {"jdbc.username", "jdbc.password"};    @Override    protected String convertProperty(String propertyName, String propertyValue) {        //如果在加密属性名单中发现该属性          if (isEncryptProp(propertyName)) {            String decryptValue = DESUtil.getDecryptString(propertyValue);            System.out.println(decryptValue);            return decryptValue;        } else {            return propertyValue;        }    }    private boolean isEncryptProp(String propertyName) {        for (String encryptName : encryptPropNames) {            if (encryptName.equals(propertyName)) {                return true;            }        }        return false;    }} 

修改配置文件

将spring-context中的<context:property-placeholder location="classpath:.properties" />修改为<bean class="com.hzdy.DCAD.common.util.EncryptPropertyPlaceholderConfigurer"p:locations="classpath:*.properties"/>//注意只能存在一个读取配置文件的bean，否则系统只会读取最前面的