HTTPS in Tomcat-CSDN博客

本文链接：https://blog.csdn.net/nomad2/article/details/7040038

本文详细介绍了Java证书的基本概念、如何使用Java Keytool创建自签名证书，并提供了Tomcat配置指南，包括如何将证书应用于Tomcat以实现HTTPS。此外，文章还讨论了Apache与Tomcat的区别、如何将.pfx文件转换为Java Keystore、Keystore与Certificate的区别以及在Tomcat中遇到的“无法恢复密钥”错误的解决方法。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

1. Certificate basic

http://www.sslshopper.com/article-most-common-java-keytool-keystore-commands.html

http://www.sslshopper.com/what-is-a-csr-certificate-signing-request.html

http://www.sslshopper.com/article-how-to-create-a-self-signed-certificate-using-java-keytool.html

2. Tomcat configure basic

http://tomcat.apache.org/tomcat-5.5-doc/config/context.html

3. SSL in Tomcat

http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html

http://httpd.apache.org/docs/2.0/ssl/ssl_faq.html

Q & A,

1. What’s the difference between Tomcat and Apache?

See http://stackoverflow.com/questions/30632/difference-between-the-apache-http-server-and-apache-tomcat

Apache Tomcat is used to deploy your Java Servlets and JSPs. So in your Java project you can build your WAR (short for Web ARchive) file, and just drop it in the deploy directory in Tomcat. So basically Apache is an HTTP Server, serving HTTP. Tomcat is a Servlet and JSP Server serving Java technologies.

There are 3 methods connect Apache and Tomcat, see http://www.ibm.com/developerworks/cn/opensource/os-lo-apache-tomcat/ and http://hi.baidu.com/youdianweidao/blog/item/f98519eaa6790bdad539c996.html

2. How do I convert my .pfx (PKCS12) file to a Java Keystore?

Method 1, using jetty, just as standalone version did, http://www.entrust.net/knowledge-base/technote.cfm?tn=7925

Method 2, convert to PEM format, then convert to Java Keystore file. http://stackoverflow.com/questions/4217107/how-to-convert-pfx-file-to-keystore-with-private-key

3. What’s the difference between Keystore and Certificate?

A keystore contains a private key. You only need this if you are a server, or if the server requires client authentication. And Certificate only contains the public key.

4. “Cannot recover key” exception in Tomcat log

2011-11-30 1:18:48 org.apache.catalina.core.AprLifecycleListener init

java.io.IOException: Cannot recover key

at org.apache.tomcat.util.net.jsse.JSSESocketFactory.init(JSSESocketFactory.java:394)

at org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESocketFactory.java:125)

at org.apache.tomcat.util.net.JIoEndpoint.init(JIoEndpoint.java:494)

at org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:175)

at org.apache.catalina.connector.Connector.initialize(Connector.java:1059)

at org.apache.catalina.core.StandardService.initialize(StandardService.java:578)

at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:792)

at org.apache.catalina.startup.Catalina.load(Catalina.java:504)

at org.apache.catalina.startup.Catalina.load(Catalina.java:524)