tomcat ssl 證書-优快云博客

本文介绍如何使用keytool生成和管理SSL证书，包括为服务器和客户端创建密钥库、导出证书文件、导入信任证书到Java的cacerts文件以及删除密钥等操作。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

keytool -genkey -alias casserver -keyalg RSA -keypass changeit
-storepass changeit -keystore server.keystore
keytool -export -alias casserver -storepass changeit -file server.cer
-keystore server.keystore
keytool -genkey -alias casclient -keyalg RSA -keypass changeit
-storepass changeit -keystore client.keystore
keytool -export -alias casclient -storepass changeit -file client.cer
-keystore client.keystore
keytool -import -trustcacerts -alias server -file server.cer -keystore cacerts
-storepass changeit
keytool -import -trustcacerts -alias client -file client.cer -keystore cacerts
-storepass changeit

keytool -import -trustcacerts -alias server -file server.cer
-keystore D:\Program Files\Java\jdk1.5.0\jre\lib\security\cacerts
-storepass changeit

keytool -delete -alias tomcat -keypass changeit
keytool -genkey -alias tomcat -keypass changeit -keyalg RSA
keytool -export -alias tomcat -keypass changeit -file %FILE_NAME%
keytool -import -file server.crt -keypass changeit -keystore
%JAVA_HOME%/jre/lib/security/cacerts

keytool -import -file server.crt -keypass changeit
keytool -genkey -alias tomcat -keypass changeit -keyalg RSA -validity 365

keytool -genkey -alias tomcat -keypass changeit -keyalg RSA -keystore
server.keystore
keytool -export -alias tomcat -keypass changeit -file server.crt
keytool -import -file server.crt -keypass changeit -keystore cacerts
%JAVA_HOME%\jre\lib\security\cacerts

conf/server.xml ：
<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="true" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" SSLEnabled="true"
keystoreFile="conf/server.keystore"
keystorePass="changeit"
/>