https tomcat 证书搭建

时间：2023-11-29 11:33:50

首先生成证书说明

keytool -genkey -alias castest -keyalg RSA -keystore c:/keys/caskey

先让输入密码，密码必须记住，下面会用到

其中“您的名字与姓氏是什么？”这是必填项，并且必须是TOMCAT部署主机的域名或者IP[如：gbcom.com 或者 10.1.25.251]（就是你将来要在浏览器中输入的访问地址），否则浏览器会弹出警告窗口，提示用户证书与所在域不匹配。在本地做开发测试时，应填 入“localhost”。

导出证书
keytool -export -file c:\keys\cas.crt -alias castest -keystore c:\keys\caskey

导入到服务端
keytool -import -keystore "C:\Program Files (x86)\Java\jdk1.8.0_73\jre\lib\security\cacerts" -file c:\keys\cas.crt -alias castest

2.配置tomcat

    <Connector port="8080" protocol="HTTP/1.1"

               connectionTimeout="20000"

               redirectPort="8443" />

    <!-- A "Connector" using the shared thread pool-->

    <!--

    <Connector executor="tomcatThreadPool"

               port="8080" protocol="HTTP/1.1"

               connectionTimeout="20000"

               redirectPort="8443" />

    -->

    <!-- Define a SSL HTTP/1.1 Connector on port 8443

         This connector uses the BIO implementation that requires the JSSE

         style configuration. When using the APR/native implementation, the

         OpenSSL style configuration is required as described in the APR/native

         documentation -->

    <!-- protocol="org.apache.coyote.http11.Http11Protocol" -->

    <Connector port="8443" protocol="HTTP/1.1"

               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"

               clientAuth="false" sslProtocol="TLS"

			   keystoreFile="c:\keys\caskey"

			   keystorePass="123456"/>

主要是配置keystoreFile 为证书说明 和 keystorePass 位上面输入的密码

其他：参考度娘

相关文章