Tomcat9 配置多个SSL证书

最新推荐文章于 2024-04-12 09:12:47 发布

赵戬

最新推荐文章于 2024-04-12 09:12:47 发布

阅读量548

点赞数

分类专栏： Windows 文章标签： ssl tomcat java

本文链接：https://blog.csdn.net/qq_38056435/article/details/130760598

版权

Windows 专栏收录该内容

17 篇文章 0 订阅

订阅专栏

该配置示例展示了如何在Tomcat服务器中修改端口设置，将HTTP的80端口重定向到HTTPS的443端口，并详细配置了两个不同域名的SSL证书以及各自对应的程序路径。同时，它还包括了访问日志记录的设置。

摘要由CSDN通过智能技术生成

第一、修改访问端口部分，将80端口跳转到443

<Connector port="80" protocol="HTTP/1.1" connectionTimeout="60000" redirectPort="443" maxPostSize="-1" maxHttpHeaderSize ="102400" URIEncoding="UTF-8"/>

第二、配置443端口关联的证书

SSL证书：certificateKeystoreFile="C:\z\tomcat\ssl\pc.zframeworks.com_e1cpdpc7.jks"

SSL证书密码：certificateKeystorePassword="e1cpdpc7"

<Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" maxHttpHeaderSize ="102400" SSLEnabled="true" defaultSSLHostConfigName="pc.zframeworks.com">

            <SSLHostConfig hostName="pc.zframeworks.com" >
                <Certificate certificateKeystoreFile="C:\z\tomcat\ssl\pc.zframeworks.com_e1cpdpc7.jks" certificateKeystorePassword="e1cpdpc7" type="RSA" />
            </SSLHostConfig>

            <SSLHostConfig hostName="h5.zframeworks.com" >
                <Certificate certificateKeystoreFile="C:\z\tomcat\ssl\h5.zframeworks.com_k2i3yo5v.jks" certificateKeystorePassword="k2i3yo5v" type="RSA" />
            </SSLHostConfig>

</Connector>

第三、配置域名对应的程序路径

<!--单域名对应路径-->
<Host name="www.zframeworks.com"  appBase="webapps\pc" unpackWARs="true" autoDeploy="true">
                <Context  docBase="C:\z\tomcat\webapps\pc" path=""  debug="0" />
                <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" prefix="localhost_access_log" suffix=".txt" pattern="%h %l %u %t &quot;%r&quot; %s %b" />
</Host>
<Host name="h5.zframeworks.com"  appBase="webapps\h5" unpackWARs="true" autoDeploy="true">
                <Context  docBase="C:\z\tomcat\webapps\h5" path=""  debug="0" />
                <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" prefix="localhost_access_log" suffix=".txt" pattern="%h %l %u %t &quot;%r&quot; %s %b" />
</Host>

<!--多域名访问一个路径-->
<!--<Host appBase="webapps" autoDeploy="true" name="localhost" unpackWARs="true">
                <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" pattern="%h %l %u %t &quot;%r&quot; %s %b" prefix="localhost_access_log" suffix=".txt"/>
</Host>-->

完整server.xml文件

<?xml version="1.0" encoding="UTF-8"?>
<Server port="8075" shutdown="SHUTDOWN">
    <Listener className="org.apache.catalina.startup.VersionLoggerListener" />
    <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
    <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
    <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
    <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />

    <GlobalNamingResources>
        <Resource name="UserDatabase" auth="Container"
                  type="org.apache.catalina.UserDatabase"
                  description="User database that can be updated and saved"
                  factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
                  pathname="conf/tomcat-users.xml" />
    </GlobalNamingResources>

    <Service name="Catalina">

        <Connector port="80" protocol="HTTP/1.1" connectionTimeout="60000" redirectPort="443" maxPostSize="-1" maxHttpHeaderSize ="102400" URIEncoding="UTF-8"/>

        <Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol" maxThreads="150" maxHttpHeaderSize ="102400" SSLEnabled="true" defaultSSLHostConfigName="pc.zframeworks.com">

            <SSLHostConfig hostName="pc.zframeworks.com" >
                <Certificate certificateKeystoreFile="C:\z\tomcat\ssl\pc.zframeworks.com_e1cpdpc7.jks" certificateKeystorePassword="e1cpdpc7" type="RSA" />
            </SSLHostConfig>

            <SSLHostConfig hostName="h5.zframeworks.com" >
                <Certificate certificateKeystoreFile="C:\z\tomcat\ssl\h5.zframeworks.com_k2i3yo5v.jks" certificateKeystorePassword="k2i3yo5v" type="RSA" />
            </SSLHostConfig>

        </Connector>

        <Engine name="Catalina" defaultHost="localhost">

            <!--单域名对应路径-->
            <Host name="www.zframeworks.com"  appBase="webapps\pc" unpackWARs="true" autoDeploy="true">
                <Context  docBase="C:\z\tomcat\webapps\pc" path=""  debug="0" />
                <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" prefix="localhost_access_log" suffix=".txt" pattern="%h %l %u %t &quot;%r&quot; %s %b" />
            </Host>
            <Host name="h5.zframeworks.com"  appBase="webapps\h5" unpackWARs="true" autoDeploy="true">
                <Context  docBase="C:\z\tomcat\webapps\h5" path=""  debug="0" />
                <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" prefix="localhost_access_log" suffix=".txt" pattern="%h %l %u %t &quot;%r&quot; %s %b" />
            </Host>

            <!--多域名访问一个路径-->
            <!--<Host appBase="webapps" autoDeploy="true" name="localhost" unpackWARs="true">
                <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs" pattern="%h %l %u %t &quot;%r&quot; %s %b" prefix="localhost_access_log" suffix=".txt"/>
            </Host>-->
        </Engine>
    </Service>
</Server>