解决方案:https://stackoverflow.com/questions/8443081/how-are-ssl-certificate-server-names-resolved-can-i-add-alternative-names-using/8444863#8444863
也就是通过keytool的-ext参数来设置可选的host名称或ip地址,第一步的生成keystore命令可修改为如下:
keytool -genkey -alias webService_tomcat -keystore tomcat.keystore -keyalg RSA -keysize 4096 -storetype JKS -ext san=ip:127.0.0.1
转载于:https://my.oschina.net/ffse54s/blog/956627