druid连接池-数据库密码的加密与解密

mac2025-04-25 4

druid连接池的加密与解密

1. 加密2. 解密

1. 加密

根据原始密码生成加密密钥首先进入druid的 Jar包所在的目录打开命令行输入一下：

java -cp druid-1.0.18.jar com.alibaba.druid.filter.config.ConfigTools 123456 druid-1.0.18.jar 为jar 的包名123456 为原始密码

生成的大概如下示例：

需要用到 publicKey 和 passwordprivateKey：私钥，用于生成密文密码用，不用管 privateKey:MIIBUwIBADANBgkqhkiG9w0BAQEFAASCAT0wggE5AgEAAkEAqbNMEelj7ai8wzhcrgpVG2364xhKB12MTjCHHS8veiuBLAIzrHQmNCi/VIPbp5CtlUxcm5o/jZU0q6nmyfbRRwIDAQABAkAaK7+Qh5jUnxA1XyzT3l4Ps99cRHOuPRwVNuCvfIZq5ahQSNu7wQqM0aoGR9Q/7CL00lH7OccbA7mJVhDj7JlxAiEA2zeB7/lbOXQZAb1/5sntP1+TpitbDhhecJmCI6QfEx8CIQDGLM2RazGwWBseBMuClnRFYW6uWD23ObhvstO9hmjk2QIgTEjWqMGnYyjpgteE6LUgIEuMP+kaeJ82Tgy9YtW8EpUCIAe9uEn15fr9dhG2Hjz7o48SP0CQMdj2aD30vlCo73ABAiAe/6yBUV+sUVISQ+TKMTZfm9rwRMRMHpHfrQ5fhbitzQ== publicKey:MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKmzTBHpY+2ovMM4XK4KVRtt+uMYSgddjE4whx0vL3orgSwCM6x0JjQov1SD26eQrZVMXJuaP42VNKup5sn20UcCAwEAAQ== password:Z8w7Q6hQ87k7hfcREdK5oIAMPBMjBX4YzazHfz0SR42sOFyOW5DTRwV18blXkFJ8EftvKkQMuRw5YxFF8al+Qw==

applicationContext.xml 的数据源配置如下：

<bean id="propertyConfigurer" class="org.springframework.beans.factory.config.PropertyPlaceholderConfigurer"> <property name="locations"> <list> <value>classpath:dbconfig.properties</value> <value>classpath:application-config.properties</value> </list> </property> </bean>  <bean id="dataSource" class="com.alibaba.druid.pool.DruidDataSource" destroy-method="close"> <property name="url" value="${url}" /> <property name="username" value="${username}" /> <property name="password" value="${password}" /> <property name="driverClassName" value="${driverClassName}" /> <property name="filters" value="${filters}" /> <property name="maxActive" value="${maxActive}" /> <property name="initialSize" value="${initialSize}" /> <property name="maxWait" value="${maxWait}" /> <property name="minIdle" value="${minIdle}" /> <property name="timeBetweenEvictionRunsMillis" value="${timeBetweenEvictionRunsMillis}" /> <property name="minEvictableIdleTimeMillis" value="${minEvictableIdleTimeMillis}" /> <property name="validationQuery" value="${validationQuery}" /> <property name="testWhileIdle" value="${testWhileIdle}" /> <property name="testOnBorrow" value="${testOnBorrow}" /> <property name="testOnReturn" value="${testOnReturn}" /> <property name="maxOpenPreparedStatements" value="${maxOpenPreparedStatements}" /> <property name="removeAbandoned" value="${removeAbandoned}" /> <property name="removeAbandonedTimeout" value="${removeAbandonedTimeout}" /> <property name="logAbandoned" value="${logAbandoned}" /> <property name="connectionProperties" value="druid.stat.slowSqlMillis=5000;config.decrypt=true;config.decrypt.key=${publickey}"/>

圈重点：

password 和 publickey 为第一步加密后的密码和公钥 filters 配置为 filters ，如果需要和其他并用的用都好隔开如filters,stat 配置文件如下：

url:jdbc:oracle:thin:@//xxx.xxx.xxx.xxx:1521/servicename driverClassName:oracle.jdbc.OracleDriver username:xxxxxx publickey:MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJpWmscUpdp65cPU3+HboZ7Rgxx3T7CkB4BZZZ8Qf924qsfwj9l4gfFzTcIxMBN2y5aqTOUoQluZVGlQYN71um0CAwEAAQq== password:VynK4fLjcNLvTT50btyFnZcmoy7itQswUw6EZh/A0DAp29B5eroVrPap0QMu5pzkwzO5mAPYlzZs2rf+00etqQq== filters:config,stat maxActive:50 initialSize:20 maxWait:60000 minIdle:20 maxIdle:15 timeBetweenEvictionRunsMillis:60000 minEvictableIdleTimeMillis:300000 validationQuery:select 1 from dual testWhileIdle:true testOnBorrow:true testOnReturn:false poolPreparedStatements:true maxOpenPreparedStatements:20 removeAbandoned:true removeAbandonedTimeout:1800 logAbandoned:true

2. 解密

pwd 加密后的passwordpub 加密产生的公钥 public static void main(String[] args) { String pwd = "Z8w7Q6hQ87k7hfcREdK5oIAMPBMjBX4YzazHfz0SR42sOFyOW5DTRwV18blXkFJ8EftvKkQMuRw5YxFF8al+Qw=="; String pub = "MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKmzTBHpY+2ovMM4XK4KVRtt+uMYSgddjE4whx0vL3orgSwCM6x0JjQov1SD26eQrZVMXJuaP42VNKup5sn20UcCAwEAAQ=="; try { String depwd = ConfigTools.decrypt(pub, pwd); System.out.println(depwd); } catch (Exception e) { e.printStackTrace(); } }

运行改main方法即可输出原始密码

最新回复(0)