Tomcat设置SSL连接器

最新推荐文章于 2022-06-02 11:17:10 发布

iteye_20179

最新推荐文章于 2022-06-02 11:17:10 发布

阅读量268

点赞数

CC 4.0 BY-SA版权

分类专栏：工具使用学习之路文章标签： SSL TOMCAT KEYTOOL

本文链接：https://blog.youkuaiyun.com/iteye_20179/article/details/82297326

工具使用学习之路专栏收录该内容

9 篇文章

订阅专栏

本文介绍如何在Tomcat中配置HTTPS，包括生成自签名证书、设置keystore及在server.xml中启用SSL连接。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1. 产生自签名的服务器认证

比如我的TOMCAT安装目录为D:\Tomcat6.0.35

D:\>keytool -genkeypair -alias tomcat -keyalg RSA -keysize 1024 -validity 365 -keystore /Tomcat6.0.35/conf/keystore

Enter keystore password: 123456
What is your first and last name?
[Unknown]: www.cool.com
What is the name of your organizational unit?
[Unknown]: World
What is the name of your organization?
[Unknown]: China
What is the name of your City or Locality?
[Unknown]: Yingkou
What is the name of your State or Province?
[Unknown]: Liaoning
What is the two-letter country code for this unit?
[Unknown]: CN
Is CN=your name, OU=your organizaion, O="your organization name",
L=your city name, ST=your province name, C=cn correct?
[no]: yes

Enter key password for <tomcat>

(RETURN if same as keystore password): 回车

以上参数配置完后，会在D:\Tomcat6.0.35\conf目录下得到自签名的服务器认证文件keystore

找到D:\Tomcat6.0.35\conf\server.xml文件中的以下代码

<!--
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
  maxThreads="150" scheme="https" secure="true"\clientAuth="false" sslProtocol="TLS" />
-->

将以上这段代码的注释打开,并且追加keystoreFile和keystorePass的配置。

<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
  SSLEnabled="true" maxThreads="150" scheme="https" secure="true"
  clientAuth="false" sslProtocol="TLS" keystoreFile="D:\Tomcat6.0.35\conf\keystore"
  keystorePass="123456" />

访问 https://127.0.0.1:8443 ,看到那只熟悉的汤姆猫就算是配置成功啦。