两步配置tomcat的SSL证书

1.生成证书

linux下

keytool -genkeypair -alias "tomcat" -keyalg "RSA"

 windows下

keytool -genkeypair -alias "tomcat" -keyalg "RSA" -keystore "c:\tomcat.keystore"

 

2.配置tomcat的server.xml

 

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" 
         maxThreads="150" scheme="https" secure="true" 
         clientAuth="false" sslProtocol="TLS"   
         keystoreFile="C:\tomcat.keystore" 
         keystorePass="tomcat" 
         ciphers="tomcat" 
/> 

 

 

如果要改用https://ip访问的话修改以下信息：

<Connector port="80" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="443" />
    <!-- A "Connector" using the shared thread pool-->
    <!--
    <Connector executor="tomcatThreadPool"
               port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />
    -->
    <!-- Define a SSL HTTP/1.1 Connector on port 8443
         This connector uses the JSSE configuration, when using APR, the
         connector should be using the OpenSSL style configuration
         described in the APR documentation -->

    <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS"
                keystoreFile="c:\tomcat.keystore"
                keystorePass="tomcat"
                ciphers="tomcat"
                />