天天看點

tomcat 配置tomcat配置https

tomcat配置https

沒有證書情況

用java工具 keytool來生成證書

C:\tools\jdk1.8.0_151\bin> ./keytool.exe -genkey -alias tomcat -keyalg RSA -keystore D:\\ssl\yss.keystore
           

在java的bin目錄下 執行指令 生成keystore

配置config

<Connector port="8088" protocol="org.apache.coyote.http11.Http11Protocol"

              maxThreads="150" SSLEnabled="true" scheme="https" secure="true"

              clientAuth="false" sslProtocol="TLS" keystoreFile="d:/yss.keystore" keystorePass="xxxxxxxxxx"  />
           

ssl  pfx為例(有證書的情況)

<Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" keystoreType="PKCS12" useBodyEncodingForURI="true"
			   keystoreFile="D:/bsorder_cert/xxxxx.cn.pfx"  
        		keystorePass="xxxxxx"/>
           

修改2處即可 

 keystoreFile="D:/bsorder_cert/xxxxx.cn.pfx"  

 keystorePass="xxxxxx"

tomcat 配置資源路徑

<Context path="" docBase="d:/xxx" reloadable="true" crossContext="true"></Context>
           

設定utf編碼

<Connector port="8080" protocol="HTTP/1.1" 
               connectionTimeout="20000" 
               redirectPort="8443" URIEncoding="UTF-8" />
           

繼續閱讀