tomcat11的HTTPS设置

server.xml设置如下：
 

    <!-- tomcat11 -->
    <Connector port="80" protocol="HTTP/1.1" 
               connectionTimeout="20000" 
               redirectPort="443" 
               URIEncoding="UTF-8"  />
   
    <Connector port="443"  protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" SSLEnabled="true"  clientAuth="false" sslProtocol="TLS" defaultSSLHostConfigName="www.bzbzyy.com"> 
   		<SSLHostConfig hostName="www.bzbzyy.com"> 
    		<Certificate 	certificateKeystoreFile="cert/server2024.jks"  	certificateKeystorePassword="Sn5#$*e!ZrpYLJD0" type="RSA" /> 
  		</SSLHostConfig>  
   </Connector>
   <Connector port="8009" protocol="AJP/1.3" redirectPort="443" secretRequired="false" />

WEB-INF/web.xml设置如下：

  <login-config>  
     <!-- Authorization setting for SSL -->   
     <auth-method>CLIENT-CERT</auth-method>  
     <realm-name>Client Cert Users-only Area</realm-name> 
  </login-config> 
  <security-constraint>  
   <!-- Authorization setting for SSL -->   
    <web-resource-collection >    
    <web-resource-name >SSL</web-resource-name> 
    <url-pattern>/*</url-pattern> 
    </web-resource-collection>  
    <user-data-constraint>   
    <transport-guarantee>CONFIDENTIAL</transport-guarantee> 
    </user-data-constraint>   
  </security-constraint>

同时要开放443端口。