SpringBoot配置文件中数据库密码加密两种方案(推荐)

<dependency>
  <groupId>com.github.ulisesbocchio</groupId>
  <artifactId>jasypt-spring-boot-starter</artifactId>
  <version>2.1.1</version>
</dependency>

#jasypt加密的盐值
jasypt.encryptor.password=erp

@Autowired
  StringEncryptor encryptor;

  @Test
  public void getPass() {
    String url = encryptor.encrypt("jdbc:mysql://127.0.0.1:3306/erp-framework?useUnicode=true&characterEncoding=utf8");
    String name = encryptor.encrypt("root");
    String password = encryptor.encrypt("mysql");
    System.out.println(url+"----------------");
    System.out.println(name+"----------------");
    System.out.println(password+"----------------");
    Assert.assertTrue(name.length() > 0);
    Assert.assertTrue(password.length() > 0);
  }

first.spring.datasource.password=ENC(7QCSL5/HKjxFQRPLGgGH7kAElrmf/mgQ) 

<!-- druid -->
<dependency>
  <groupId>com.alibaba</groupId>
  <artifactId>druid</artifactId>
  <version>1.1.12</version>
</dependency>

first.spring.datasource.username = root
first.spring.datasource.password = iujrgO5nD09lQfS9+SbTvOf4Wcp8jtJOSDnqSEq1jnFEUYW3UE/2bMMLv/Y74wSXUPUu6H6L/SJWkYpYujZ9AA==
first.spring.datasource.publicKey = MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJHmM9MkpAGxAnx/6+b2zNUIXYQUpgIOQBbEzkBmhgrrOa2oxYNzm7zYGuBlAugYzk1zSW8SAVT/b9ihGvHqutsCAwEAAQ

 @Test
  public void druidEncrypt() throws Exception {
    //密码明文
    String password = "mysql";
    System.out.println("明文密码: " + password);
    String[] keyPair = ConfigTools.genKeyPair(512);
    //私钥
    String privateKey = keyPair[0];
    //公钥
    String publicKey = keyPair[1];

    //用私钥加密后的密文
    password = ConfigTools.encrypt(privateKey, password);

    System.out.println("privateKey:" + privateKey);
    System.out.println("publicKey:" + publicKey);

    System.out.println("password:" + password);

    String decryptPassword = ConfigTools.decrypt(publicKey, password);
    System.out.println("解密后:" + decryptPassword);
  }

# 配置监控统计拦截的filters
first.spring.datasource.filters=stat,log4j2,config
# 通过connectProperties属性来打开mergeSql功能；慢SQL记录
first.spring.datasource.connectionProperties=druid.stat.mergeSql=true;druid.stat.slowSqlMillis=5000;config.decrypt=true;config.decrypt.key=${first.spring.datasource.publicKey}