天天看点

tomcat 配置tomcat配置https

tomcat配置https

没有证书情况

用java工具 keytool来生成证书

C:\tools\jdk1.8.0_151\bin> ./keytool.exe -genkey -alias tomcat -keyalg RSA -keystore D:\\ssl\yss.keystore
           

在java的bin目录下 执行指令 生成keystore

配置config

<Connector port="8088" protocol="org.apache.coyote.http11.Http11Protocol"

              maxThreads="150" SSLEnabled="true" scheme="https" secure="true"

              clientAuth="false" sslProtocol="TLS" keystoreFile="d:/yss.keystore" keystorePass="xxxxxxxxxx"  />
           

ssl  pfx为例(有证书的情况)

<Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" keystoreType="PKCS12" useBodyEncodingForURI="true"
			   keystoreFile="D:/bsorder_cert/xxxxx.cn.pfx"  
        		keystorePass="xxxxxx"/>
           

修改2处即可 

 keystoreFile="D:/bsorder_cert/xxxxx.cn.pfx"  

 keystorePass="xxxxxx"

tomcat 配置资源路径

<Context path="" docBase="d:/xxx" reloadable="true" crossContext="true"></Context>
           

设置utf编码

<Connector port="8080" protocol="HTTP/1.1" 
               connectionTimeout="20000" 
               redirectPort="8443" URIEncoding="UTF-8" />
           

继续阅读