tomcat配置SSL步骤

最新推荐文章于 2024-04-26 19:28:05 发布

xiaoo_gan

最新推荐文章于 2024-04-26 19:28:05 发布

阅读量2.4k

点赞数

分类专栏： java 文章标签： tomcat java ssl

本文链接：https://blog.csdn.net/ever223/article/details/51923730

版权

java 专栏收录该内容

163 篇文章 1 订阅

订阅专栏

生成证书

 $ JAVA_HOME/bin/keytool -v -genkey -alias tomcat -keyalg RSA -keystore /Users/xiaoo_gan/Downloads/tomcat.keystore

 $ JAVA_HOME/bin/keytool -exportcert -alias tomcat -keystore /Users/xiaoo_gan/Downloads/tomcat.keystore -file /Users/xiaoo_gan/Downloads/tomcat.cer

按提示完成问答,即可生成证书
PS:问题 What is your first and last name? 填写本机IP地址，本地测试可以填写localhost

配置`tomcat/conf/server.xml`

找到Connector port="8443",改为

      <Connector port="8443" 
      protocol="HTTP/1.1" 
      SSLEnabled="true"   
      maxThreads="150" 
      scheme="https" 
      secure="true" 
      clientAuth="false" 
      keystoreFile="/Users/xiaoo_gan/Downloads/tomcat.keystore" 
      keystorePass="tomcat"
      sslProtocol="TLS" />

keystoreFile: 为步骤1生成证书的位置
keystorePass: 为步骤1生成证书时设置的密码

配置项目WEB_INF/web.xml (非spring－security项目)

添加

<login-config>
    <!-- Authorization setting for SSL -->
    <auth-method>CLIENT-CERT</auth-method>
    <realm-name>Client Cert Users-only Area</realm-name>
</login-config>
<security-constraint>
    <!-- Authorization setting for SSL -->
    <web-resource-collection>
        <web-resource-name>SSL</web-resource-name>
        <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
</security-constraint>

配置URIEncoding=”UTF-8”

问题：由于将`http`转成`https`，`http:8080`重定向到`https:8443`

所以在tomcat中端口号8080所在的Connector设置URIEncoding="UTF-8"不再起作用，

    <Connector port="8080" 
        protocol="HTTP/1.1"
        URIEncoding="UTF-8"
        connectionTimeout="20000"
        redirectPort="8443"
        useBodyEncodingForURI="true"/>

故应该在端口8443所在的Connector中设置URIEncoding="UTF-8"

    <Connector port="8443" 
      protocol="HTTP/1.1" 
      SSLEnabled="true"   
      maxThreads="150" 
      scheme="https" 
      secure="true" 
      clientAuth="false" 
      keystoreFile="D:\tomcat.keystore" 
      keystorePass="tomcat"
      sslProtocol="TLS"
      URIEncoding="UTF-8"/>