Tomcat 配置https请求

第一步

    生成jks文件

  cmd执行下面命令

keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore D:\keystore.jks -storepass 111111 -keypass 111111

 

storepass：获取keystore信息的密码)

keypass：tomcat密码

第二步

    配置server.xml

<Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"         maxThreads="150" scheme="https" secure="true"         keystoreFile="jks全路径"         keystorePass="密钥"         clientAuth="false" sslProtocol="TLS" />

 第三步

        在web.xml的</web-app>前添加

<login-config>     <auth-method>CLIENT-CERT</auth-method>     <realm-name>Client Cert Users-only Area</realm-name>     </login-config>     <security-constraint>     <web-resource-collection>     <web-resource-name>SSL</web-resource-name>     <url-pattern>/*</url-pattern>     </web-resource-collection>     <user-data-constraint>     <transport-guarantee>CONFIDENTIAL</transport-guarantee>     </user-data-constraint>     </security-constraint>