Tomcat同时支持HTTP和HTTPS协议，HTTP自动转HTTPS

HeyJarvis

已于 2023-03-14 13:58:30 修改

阅读量1.5k

点赞数 1

分类专栏： Tomcat 文章标签： tomcat https servlet http

于 2022-08-18 09:40:47 首次发布

本文链接：https://blog.csdn.net/HeyJarvis/article/details/126399015

版权

Tomcat 专栏收录该内容

1 篇文章 0 订阅

订阅专栏

1.在配置文件"/usr/local/java/tomcat/conf/server.xml"中配置以下信息

<Connector
      port="80" 
      protocol="HTTP/1.1"
      connectionTimeout="20000"
      redirectPort="443"
    />
    <Connector port="443" 
       protocol="HTTP/1.1"
      SSLEnabled="true"
      scheme="https"
      secure="true"
      keystoreFile="你自己证书的存放位置"
      keystoreType="PKCS12"
      keystorePass="证书密码"
      clientAuth="false"
      SSLProtocol="TLSv1.1+TLSv1.2+TLSv1.3"
      ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256"
     "/>

2.在配置文件"/usr/local/java/tomcat/conf/web.xml"的</welcome-file-list>标签后添加以下配置，此步骤会将HTTP请求自动转HTTPS请求

    <login-config>  
        <!-- Authorization setting for SSL -->  
        <auth-method>CLIENT-CERT</auth-method>  
        <realm-name>Client Cert Users-only Area</realm-name>  
    </login-config>  
    <security-constraint>  
        <!-- Authorization setting for SSL -->  
        <web-resource-collection >  
            <web-resource-name>SSL</web-resource-name>
            <url-pattern>/*</url-pattern>  
        </web-resource-collection>  
        <user-data-constraint>  
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>  
        </user-data-constraint>  
    </security-constraint>