Configuring Tomcat 5.5 for SSL using OpenSSL

最新推荐文章于 2024-02-04 07:30:00 发布

原创最新推荐文章于 2024-02-04 07:30:00 发布 · 127 阅读

0 ·

CC 4.0 BY-SA版权

文章标签：

#Tomcat SSL

Tomcat 专栏收录该内容

4 篇文章

订阅专栏

本文详细介绍如何使用 OpenSSL 为 Tomcat 生成并配置 SSL 证书，包括 RSA 密钥生成、证书请求、转换证书格式到 PKCS12 以及在 Tomcat 中启用 SSL 的步骤。

转自：http://blogs.dfwikilabs.org/pigui/2007/12/10/configuring-tomcat-55-for-ssl-using-openssl/

This post explains step by step actions to enable SSL in Tomcat

Generate an RSA key for signing the certificate:
```
openssl genrsa -out key.pem 2048
```
Generate a certificate using the new key:
```
openssl req -new -x509 -key key.pem -out cert.pem -days 365
```
Answer the quesstions with your name, organization name, e-mail, etc.
Since the certificate is in PEM format, convert it to PKCS12 for Tomcat:
```
openssl pkcs12 -export -in cert.pem -inkey key.pem -out cert.p12 -name tomcat
```
Enter a password, don’t leave it blank.

Edit $TOMCAT_HOME/conf/server.xml and modify the SSL connector:

    <Connector port="8443"
         maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
         enableLookups="false" disableUploadTimeout="true"
         acceptCount="100" debug="0" scheme="https" secure="true"
         clientAuth="false" sslProtocol="TLS" keystoreType="PKCS12"
         keystoreFile="conf/cert.p12" keystorePass="password"/>

Remember to change password with the one typed at 3.

Note: DON’T use a self-signed certificate in a PRODUCTION SITE! Contact with a CA to sign your certificate.