Add ssl_bundle.

2 files changed, 102 insertions, 0 deletions

diff --git a/src/main/java/org/berzerkula/builddb/config/SecurityConfig.java b/src/main/java/org/berzerkula/builddb/config/SecurityConfig.java
index b346b59..5a971d9 100644
--- a/src/main/java/org/berzerkula/builddb/config/SecurityConfig.java
+++ b/src/main/java/org/berzerkula/builddb/config/SecurityConfig.java
@@ -18,6 +18,7 @@ public class SecurityConfig {
 	@Bean
     public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
         return http
+				//.requiresChannel(channel -> channel.anyRequest().requiresSecure())
                 .authorizeHttpRequests( auth -> auth
                 		.requestMatchers("/").permitAll()
 						.requestMatchers("/actuator/**").hasRole(BuilddbConstants.ROLE_ADMIN)
diff --git a/src/main/resources/application.yml b/src/main/resources/application.yml
index c783bbb..03b65d1 100644
--- a/src/main/resources/application.yml
+++ b/src/main/resources/application.yml
@@ -10,6 +10,107 @@ spring:
     show-sql: false
     hibernate:
       ddl-auto: update
+  ssl:
+    bundle:
+      pem:
+        berzerkula:
+          keystore:
+            certificate: |
+              -----BEGIN CERTIFICATE-----
+              MIIGIDCCBQigAwIBAgIQCqdoPA+PhjFjYbpFGyVfuTANBgkqhkiG9w0BAQsFADBg
+              MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+              d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx
+              MB4XDTI0MTAxODAwMDAwMFoXDTI1MTAxOTIzNTk1OVowGzEZMBcGA1UEAwwQKi5i
+              ZXJ6ZXJrdWxhLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMm9
+              sULYIQkk0bbdW/01+8YRGAQMd7ZFbq9/H6/BBXCxqTA2I8yPPOujvOJMnxAQ1H94
+              a+tydShHqKXNN3c+C9BUDsuYslYB+UORpdvo+GAEtcgFH63SVVfI2yHkKPwozb6V
+              eexllONs7lDuqroUwChqIEsHiFEpo92U61fYocn2IUapAPITxB6Ue3kyohAbZe1v
+              yXz0yAvv5jw4hBAI6Eec4i8POM/24ky8EZrsXG3tSw1wptOVeWFzWibm7wWNHick
+              xt4HvuFSMloByjTbap9hSJAN80zGjvK7odRzEq2Sx35uGyjuneft/tjDje7AEMrk
+              tAkI+CY8oQ1TY+gf/28CAwEAAaOCAxkwggMVMB8GA1UdIwQYMBaAFAzbbIJJD0pn
+              CrgU7nrESFKI61Y4MB0GA1UdDgQWBBSTMx8F/Yl8LZfk5p5gXONiXx3mOTAbBgNV
+              HREEFDASghAqLmJlcnplcmt1bGEub3JnMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkw
+              JwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8B
+              Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4
+              MDYwNKAyoDCGLmh0dHA6Ly9jZHAucmFwaWRzc2wuY29tL1JhcGlkU1NMVExTUlNB
+              Q0FHMS5jcmwwdgYIKwYBBQUHAQEEajBoMCYGCCsGAQUFBzABhhpodHRwOi8vc3Rh
+              dHVzLnJhcGlkc3NsLmNvbTA+BggrBgEFBQcwAoYyaHR0cDovL2NhY2VydHMucmFw
+              aWRzc2wuY29tL1JhcGlkU1NMVExTUlNBQ0FHMS5jcnQwDAYDVR0TAQH/BAIwADCC
+              AX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYAEvFONL1TckyEBhnDjz96E/jntWKH
+              iJxtMAWE6+WGJjoAAAGSoa5dMAAABAMARzBFAiBj/RGjpHMBq0kE992DSkWfGy3M
+              pk/G4fFqlvrEVA+7nwIhAL08Fa0kluac/hz1Ov/rl27fJCEpnexYAcC0Jz3g97hO
+              AHcAzPsPaoVxCWX+lZtTzumyfCLphVwNl422qX5UwP5MDbAAAAGSoa5dMgAABAMA
+              SDBGAiEAs/78Rhkeu71sNcoEVvdbKf45I9MscnQiX6nNQ6UucYgCIQDNkRfPOP+O
+              N6fwicFvs8NMzVg6XZq416NcVDP1+KgYxQB1AN3cyjSV1+EWBeeVMvrHn/g9HFDf
+              2wA6FBJ2Ciysu8gqAAABkqGuXY8AAAQDAEYwRAIgGDRQK7eNCPpQlxPnEXA6fFEw
+              7MgqFMFilxNLoDjBeWkCIGCmfIXcz8giLFjwLsGQtE5LyIl8A94jUr3dYOLqiU4Y
+              MA0GCSqGSIb3DQEBCwUAA4IBAQCABDtuYvxvxN2W21RpDJzf03VBIA+mnEk+YQU2
+              tpPF9oQBfCrD429tXO6aDPKHV0kfUV9nKtfDB9kWhc/KNZfA739nkRk1EgpFY/KV
+              RTKX/NOAPRGmmHu4fyR7hFkJB3EdP9Fam/4uyuEA3W4gwhImuoJOmbyE3P7qVJ5F
+              4Y4tOWTOlStfJAy1Fkr/JU+9j2zGYl34Q6gueL26hUwdoLgsI97XfYjZMbgbHdoe
+              jLbEuJinEYvgh7a1ncop1IzRsJNhtvjE59BraR32r0SUqe6y8Nxqo/pzzr0Xy1c3
+              /Mzbtdg98nXzurMMvErJTjTZ2TiFr8jonN6S97OzHhE003iV
+              -----END CERTIFICATE-----
+              -----BEGIN CERTIFICATE-----
+              MIIEszCCA5ugAwIBAgIQCyWUIs7ZgSoVoE6ZUooO+jANBgkqhkiG9w0BAQsFADBh
+              MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
+              d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
+              MjAeFw0xNzExMDIxMjI0MzNaFw0yNzExMDIxMjI0MzNaMGAxCzAJBgNVBAYTAlVT
+              MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
+              b20xHzAdBgNVBAMTFlJhcGlkU1NMIFRMUyBSU0EgQ0EgRzEwggEiMA0GCSqGSIb3
+              DQEBAQUAA4IBDwAwggEKAoIBAQC/uVklRBI1FuJdUEkFCuDL/I3aJQiaZ6aibRHj
+              ap/ap9zy1aYNrphe7YcaNwMoPsZvXDR+hNJOo9gbgOYVTPq8gXc84I75YKOHiVA4
+              NrJJQZ6p2sJQyqx60HkEIjzIN+1LQLfXTlpuznToOa1hyTD0yyitFyOYwURM+/CI
+              8FNFMpBhw22hpeAQkOOLmsqT5QZJYeik7qlvn8gfD+XdDnk3kkuuu0eG+vuyrSGr
+              5uX5LRhFWlv1zFQDch/EKmd163m6z/ycx/qLa9zyvILc7cQpb+k7TLra9WE17YPS
+              n9ANjG+ECo9PDW3N9lwhKQCNvw1gGoguyCQu7HE7BnW8eSSFAgMBAAGjggFmMIIB
+              YjAdBgNVHQ4EFgQUDNtsgkkPSmcKuBTuesRIUojrVjgwHwYDVR0jBBgwFoAUTiJU
+              IBiV5uNu5g/6+rkS7QYXjzkwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsG
+              AQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMDQGCCsGAQUFBwEB
+              BCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEIGA1Ud
+              HwQ7MDkwN6A1oDOGMWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEds
+              b2JhbFJvb3RHMi5jcmwwYwYDVR0gBFwwWjA3BglghkgBhv1sAQEwKjAoBggrBgEF
+              BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzALBglghkgBhv1sAQIw
+              CAYGZ4EMAQIBMAgGBmeBDAECAjANBgkqhkiG9w0BAQsFAAOCAQEAGUSlOb4K3Wtm
+              SlbmE50UYBHXM0SKXPqHMzk6XQUpCheF/4qU8aOhajsyRQFDV1ih/uPIg7YHRtFi
+              CTq4G+zb43X1T77nJgSOI9pq/TqCwtukZ7u9VLL3JAq3Wdy2moKLvvC8tVmRzkAe
+              0xQCkRKIjbBG80MSyDX/R4uYgj6ZiNT/Zg6GI6RofgqgpDdssLc0XIRQEotxIZcK
+              zP3pGJ9FCbMHmMLLyuBd+uCWvVcF2ogYAawufChS/PT61D9rqzPRS5I2uqa3tmIT
+              44JhJgWhBnFMb7AGQkvNq9KNS9dd3GWc17H/dXa1enoxzWjE0hBdFjxPhUb0W3wi
+              8o34/m8Fxw==
+              -----END CERTIFICATE-----
+            private-key: |
+              -----BEGIN RSA PRIVATE KEY-----
+              MIIEpAIBAAKCAQEAyb2xQtghCSTRtt1b/TX7xhEYBAx3tkVur38fr8EFcLGpMDYj
+              zI8866O84kyfEBDUf3hr63J1KEeopc03dz4L0FQOy5iyVgH5Q5Gl2+j4YAS1yAUf
+              rdJVV8jbIeQo/CjNvpV57GWU42zuUO6quhTAKGogSweIUSmj3ZTrV9ihyfYhRqkA
+              8hPEHpR7eTKiEBtl7W/JfPTIC+/mPDiEEAjoR5ziLw84z/biTLwRmuxcbe1LDXCm
+              05V5YXNaJubvBY0eJyTG3ge+4VIyWgHKNNtqn2FIkA3zTMaO8ruh1HMSrZLHfm4b
+              KO6d5+3+2MON7sAQyuS0CQj4JjyhDVNj6B//bwIDAQABAoIBAD3oPxAjIKgcq1ox
+              PXxLZ5KVRkhfxxCg5+Fk4kVdtxyo+CE6S+wG/IvW+Cx9lMYqU/s16fAbdIZCzybp
+              /Z5S5O8uDEg/+GHaQzKP7FS6fhWA/IN/xwPhKp1AnrYcvNL8dn6Ighyf43uSvuMJ
+              Ck0F9x2vy28axaMaYxWpEDsp2CQQHuoVk/sefhfYX7EOdY/kpHkCP6EYlm2Ov3+0
+              SmvohEs8/sasbZmPHjYSJAQpZY7K8dCG/CQI25vMDoj47uxKWuVX07u9aIF78SMi
+              BLS+Pt4TNXtLpxqvLgtPMMxd7rry8FYDBGZu6u6JOw1Ayft0vBjmDdKKv/LbT/r+
+              qQJNdlECgYEA7tDLsAegtMXXmZ6+UJxWL/yPL+QRqLOye8Gm2oksndB3x9IV2YOt
+              y7Si/DNNx8qjco3XcWzKaI2HyG6Dp3u+gmtORx2199fyjidMQyZc7RZFA2cyhovm
+              2yaFhaFoYVNY8Gyrj2w3p39uCO6s5L3SIBKNRXGuIMgoixWgntvCsIkCgYEA2EHy
+              rNNaNaUbpTsONUpYsDX2jMzBrP680sO9b9W4Od6UeM50JLR3Uv4UwSh2wQkQ4whG
+              rPsXFwgJ1dwwhCCOp1jE1Ggt+rtcyDigUpBViEMpYxRzRKbTcopy0+o++9VZM5zF
+              z+Jm+re5qwI89eUkeoHbpIFTZq327MjBzZPTAjcCgYEAmITSwU5tzWXZBuxCAXuG
+              88iprd1LheGV6MHJjSI0U2mzRfOfLraRRVrNCKK/VwzMjDmYUYE4V8Oj51blUA6Q
+              ofxkFrkb4PiSmUTxyKT0jho94ymCNDmfK3ETrz9hSV8QmyPcAZIMjTWuEZhU5RVx
+              4DfY73Pl0FvkwMcEONCDK3kCgYEApkhPKMR6oLULxMjb6+32s8dKhIkMgtB8sDMB
+              /nP+68BRuXJFq9N3zMDBhKRwa41lBqzeazPGVVdA+MgOJgpCpjqDXi+c6yYV+X5R
+              CCsjGVtK/3xCBY+hFnmOQZPkSg+KPz1UfLxBIpcSlINsDEbc/bXMBXnLfzBUpUzY
+              eBIqNZECgYAr+fDWUUpQtKQwTe6LLglR7MRFbsWKj7ruoumibW//ynIJeO9bxW+7
+              AdPYdJ2yKcnSpWv6P+QF+kp6ayiI0sNqa2wr67gi+iK+DTyzvEe4g6WYif4wwcgP
+              mF9zaMVXgdBFCFEGK58XcFX2rhv4sIpcQAfRvbqMHfBst3Lnfu5PGw==
+              -----END RSA PRIVATE KEY-----
+server:
+  ssl:
+    bundle: berzerkula
+    client-auth: want
 
 jasypt:
   encryptor: