http重定向至https,80端口向443重定向

tomcat 默认端口说明:

<Server port="8005" shutdown="SHUTDOWN"> 远程停服务端口

<Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" URIEncoding="UTF-8"/> 其中8080为HTTP端口，8443为默认HTTPS端口

<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" /> 8009为AJP端口,服务器之间的通信使用该端口

HTTP重定向至HTTPS也就是将80端口重定向至443端口

1. 设置https 访问:

<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"

maxThreads="150" scheme="https" secure="true"

clientAuth="false" sslProtocol="TLS"

keystoreFile="/usr/share/tomcat7/conf/.keystore" keystorePass=" sunyainfo.com"/>

keystoreFile : 证书存放路径

keystorePass : 证书密码

2. 配置80端口,将8080改成80, redirectPort设置为443

<Connector port="80" protocol="HTTP/1.1"

connectionTimeout="20000"

URIEncoding="UTF-8"

redirectPort="443" />

3. 配置8009端口重定向

<Connector port="8009" protocol="AJP/1.3" redirectPort="443" />

4. 在 $TOMCAT_HOME/bin/web.xml中加入以下配置,禁止http访问

<security-constraint>

<web-resource-collection >

<web-resource-name >SSL</web-resource-name>

<url-pattern>/*</url-pattern>

</web-resource-collection>

<user-data-constraint>

<transport-guarantee>CONFIDENTIAL</transport-guarantee>

</user-data-constraint>

</security-constraint>

5.重启tomcat即可

The end