mysql数据库查询预览

@@ -311,6 +311,12 @@
             <artifactId>mysql-connector-java</artifactId>
             <version>8.0.28</version>
         </dependency>
+        <!-- JSch for SSH -->
+        <dependency>
+            <groupId>com.jcraft</groupId>
+            <artifactId>jsch</artifactId>
+            <version>0.1.55</version>
+        </dependency>
     </dependencies>
     <build>
         <plugins>

 package org.thingsboard.server.dao.yunteng.impl;
 
+import com.jcraft.jsch.JSch;
+import com.jcraft.jsch.Session;
 import com.zaxxer.hikari.HikariConfig;
 import com.zaxxer.hikari.HikariDataSource;
+import lombok.extern.slf4j.Slf4j;
 import org.apache.commons.lang3.BooleanUtils;
 import org.apache.commons.lang3.StringUtils;
 import org.springframework.stereotype.Service;
 import org.thingsboard.server.common.data.yunteng.dto.TkDbConnectDTO;
+import org.thingsboard.server.common.data.yunteng.dto.TkDbConnectSshDTO;
+import org.thingsboard.server.common.data.yunteng.dto.TkDbConnectSslDTO;
 import org.thingsboard.server.dao.yunteng.service.BaseDbConnectService;
 
+import javax.net.ssl.SSLContext;
+import javax.net.ssl.TrustManagerFactory;
+import java.io.FileInputStream;
+import java.security.KeyStore;
 import java.sql.*;
 import java.util.ArrayList;
 import java.util.List;
+import java.util.Properties;
 
 /**
  * mySql类型数据库连接查询
  */
 @Service("MySql")
+@Slf4j
 public class MySqlDbConnectServiceImpl implements BaseDbConnectService {
+
+    private static SSLContext sslContext = null;
+
     @Override
     public Object connect(TkDbConnectDTO tkDbConnectDTO) {
         if (BooleanUtils.isNotTrue(tkDbConnectDTO.isOpenSsh()) && BooleanUtils.isNotTrue(tkDbConnectDTO.isOpenSsl())) {
             return commonConnect(tkDbConnectDTO);
+        } else if (BooleanUtils.isTrue(tkDbConnectDTO.isOpenSsh()) && BooleanUtils.isNotTrue(tkDbConnectDTO.isOpenSsl())) {
+            return sshConnect(tkDbConnectDTO);
+        } else if (BooleanUtils.isNotTrue(tkDbConnectDTO.isOpenSsh()) && BooleanUtils.isTrue(tkDbConnectDTO.isOpenSsl())) {
+            return sslConnect(tkDbConnectDTO);
+        } else if (BooleanUtils.isTrue(tkDbConnectDTO.isOpenSsh()) && BooleanUtils.isTrue(tkDbConnectDTO.isOpenSsl())) {
+            return sshAndSslConnect(tkDbConnectDTO);
+        }
+
+        return null;
+    }
+
+    private Object sshAndSslConnect(TkDbConnectDTO tkDbConnectDTO) {
+        try {
+            // 1. 建立SSH隧道
+            int localPort = setupSSHTunnel(tkDbConnectDTO.getSsh(), tkDbConnectDTO);
+            // 配置SSL
+            TkDbConnectSslDTO ssl = tkDbConnectDTO.getSsl();
+            if (ssl.getCaCert() != null) {
+                sslContext = createSSLContext(ssl.getClientCert(), ssl.getClientKey());
+            }
+
+            String jdbcUrl = "jdbc:mysql://localhost:" + localPort + "/" + tkDbConnectDTO.getDbName() +
+                    "?useSSL=true" +
+                    "&requireSSL=true" +
+                    "&verifyServerCertificate=" + ssl.isVerifyCaCert() +
+                    "&enabledTLSProtocols=TLSv1.2,TLSv1.3";
+            tkDbConnectDTO.setUrl(jdbcUrl);
+            return commonConnect(tkDbConnectDTO);
+        } catch (Exception e) {
+            log.error("sshAndSslConnect occur error!", e);
+            e.printStackTrace();
+        }
+
+        return null;
+    }
+
+    private Object sslConnect(TkDbConnectDTO tkDbConnectDTO) {
+        try {
+            TkDbConnectSslDTO ssl = tkDbConnectDTO.getSsl();
+            // 配置SSL
+            if (ssl.getCaCert() != null) {
+                sslContext = createSSLContext(ssl.getClientCert(), ssl.getClientKey());
+            }
+
+            String jdbcUrl = tkDbConnectDTO.getUrl()
+                    + "?useSSL=true&"
+                    + "requireSSL=true&"
+                    + "verifyServerCertificate=" + ssl.isVerifyCaCert() + "&"
+                    + "enabledTLSProtocols=TLSv1.2,TLSv1.3";
+            tkDbConnectDTO.setUrl(jdbcUrl);
+            return commonConnect(tkDbConnectDTO);
+        } catch (Exception e) {
+            log.error("sslConnect occur error!", e);
+            e.printStackTrace();
         }
 
         return null;
     }
 
+    private static SSLContext createSSLContext(String certPath, String certPassword)
+            throws Exception {
+        KeyStore keyStore = KeyStore.getInstance("PKCS12");
+        try (FileInputStream fis = new FileInputStream(certPath)) {
+            keyStore.load(fis, certPassword.toCharArray());
+        }
+
+        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
+        tmf.init(keyStore);
+
+        SSLContext sslContext = SSLContext.getInstance("TLS");
+        sslContext.init(null, tmf.getTrustManagers(), null);
+        return sslContext;
+    }
+
+    private Object sshConnect(TkDbConnectDTO tkDbConnectDTO) {
+        try {
+            // 1. 建立SSH隧道
+            int localPort = setupSSHTunnel(tkDbConnectDTO.getSsh(), tkDbConnectDTO);
+            tkDbConnectDTO.setUrl("jdbc:mysql://localhost:" + localPort + "/" + tkDbConnectDTO.getDbName());
+            return commonConnect(tkDbConnectDTO);
+        } catch (Exception e) {
+            log.info("sshConnect occur error!", e);
+            e.printStackTrace();
+        }
+
+        return null;
+    }
+
+    private int setupSSHTunnel(TkDbConnectSshDTO ssh, TkDbConnectDTO tkDbConnectDTO) throws Exception {
+        JSch jsch = new JSch();
+        Session sshSession = jsch.getSession(ssh.getSshName(), ssh.getIp(), Integer.parseInt(ssh.getPort()));
+        if (StringUtils.isBlank(ssh.getVerifyMethod()) || "PASSWORD".equals(ssh.getVerifyMethod())) {
+            sshSession.setPassword(ssh.getSshPassword());
+        } else {
+            // 可以添加密钥文件（替代密码）
+            jsch.addIdentity(ssh.getPrivateKey());
+        }
+
+        Properties config = new Properties();
+        config.put("StrictHostKeyChecking", "no");
+        sshSession.setConfig(config);
+
+        // 设置SSH连接超时
+        sshSession.connect(tkDbConnectDTO.getConnectTimeout());
+
+        // 分配本地端口（0表示自动选择）
+        int localPort = sshSession.setPortForwardingL(0, tkDbConnectDTO.getIp(), Integer.parseInt(tkDbConnectDTO.getPort()));
+        System.out.println("SSH隧道建立成功，本地端口: " + localPort);
+
+        return localPort;
+    }
+
     private Object commonConnect(TkDbConnectDTO tkDbConnectDTO) {
         PreparedStatement statement = null;
         ResultSet resultSet = null;
@@ -39,6 +160,11 @@ public class MySqlDbConnectServiceImpl implements BaseDbConnectService {
             config.setPassword(tkDbConnectDTO.getPassword());
             config.setDriverClassName("com.mysql.cj.jdbc.Driver");
 
+            // SSL配置
+            if (sslContext != null) {
+                config.addDataSourceProperty("sslContext", sslContext);
+            }
+
             // 连接池配置
             config.setMaximumPoolSize(tkDbConnectDTO.getMaxPoolSize());          // 最大连接数
             config.setMinimumIdle(tkDbConnectDTO.getMinIdle());               // 最小空闲连接数