tomcat配置ssl访问

linux
,

修改server.xml配置文件

1.打开ssl配置段,开启8443端口

1
2
3
4
5
<!--
    <Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" />
 -->

修改成

1
2
3
4
5
6
7
<pre class="wp-block-code"><code><Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               keystoreFile="conf/test.jks"     #keystoreFile配置证书,证书需要事先准备好
                keystorePass="12345678"     #证书密码
                keystoreType="JKS"  #证书类型

               clientAuth="false" sslProtocol="TLS" />

修改主端口配置段,添加redirectPort=”443”

1
2
3
4
5
6
7
<Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               acceptCount="1500"
               enableLookups="false"
               URIEncoding="UTF-8"
               redirectPort="8443"  #添加的参数
               useBodyEncodingForURI="true"/>

配置http跳转https

修改web.xml,添加如下配置

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
<login-config>
        <!-- Authorization setting for SSL -->
        <auth-method>CLIENT-CERT</auth-method>
        <realm-name>Client Cert Users-only Area</realm-name>
</login-config>
<security-constraint>
        <!-- Authorization setting for SSL -->
        <web-resource-collection >
            <web-resource-name >SSL</web-resource-name>
            <url-pattern>/*</url-pattern>
        </web-resource-collection>
        <user-data-constraint>
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
</security-constraint>