tomcat ssl 證書

keytool -genkey -alias casserver -keyalg RSA -keypass changeit
   -storepass changeit -keystore server.keystore
keytool -export -alias casserver -storepass changeit -file server.cer
   -keystore server.keystore
keytool -genkey -alias casclient -keyalg RSA -keypass changeit
   -storepass changeit -keystore client.keystore
keytool -export -alias casclient -storepass changeit -file client.cer
   -keystore client.keystore
keytool -import -trustcacerts -alias server -file server.cer -keystore cacerts
   -storepass changeit
keytool -import -trustcacerts -alias client -file client.cer -keystore cacerts
   -storepass changeit

keytool -import -trustcacerts -alias server -file server.cer
   -keystore D:\Program Files\Java\jdk1.5.0\jre\lib\security\cacerts
   -storepass changeit


keytool -delete -alias tomcat -keypass changeit
keytool -genkey -alias tomcat -keypass changeit -keyalg RSA
keytool -export -alias tomcat -keypass changeit -file %FILE_NAME%
keytool -import -file server.crt -keypass changeit -keystore
   %JAVA_HOME%/jre/lib/security/cacerts

keytool -import -file server.crt -keypass changeit
keytool -genkey -alias tomcat -keypass changeit -keyalg RSA -validity 365

keytool -genkey -alias tomcat -keypass changeit -keyalg RSA -keystore
    server.keystore
keytool -export -alias tomcat -keypass changeit -file server.crt
keytool -import -file server.crt -keypass changeit -keystore cacerts   
    %JAVA_HOME%\jre\lib\security\cacerts


conf/server.xml ：
<Connector port="8443" maxHttpHeaderSize="8192"
        maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="true" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" SSLEnabled="true"
keystoreFile="conf/server.keystore"
keystorePass="changeit"
/>