CentOS 7 配置JDK+Tomcat+SSL

环境准备：将JDK、TOMCAT与要搭建的网站的源码导入系统

[root@localhost /]# ls

**apache-tomcat-10.0.4.tar.gz**  bin  boot  dev  etc  home  **index.html**  **jdk-8u171-linux-x64.tar.gz**  lib  lib64  media  mnt  opt  proc  root  run  sbin  srv  sys  tmp  usr  var

解压JDK与TOMCAT

[root@localhost /]# tar -zxf jdk-8u171-linux-x64.tar.gz

[root@localhost /]# tar -zxf apache-tomcat-10.0.4.tar.gz

在/usr目录下创建java目录

[root@localhost /]# mkdir /usr/java

将解压好的JDK文件移动到java目录中

[root@localhost /]# mv jdk1.8.0_171 /usr/java/

将复制进去的文件更改名字

[root@localhost java]# mv jdk1.8.0_171 java

配置JDK环境变量

[root@localhost /]# vim /etc/profile

export JAVA_HOME=/usr/java/java

export JAVA_BIN=$JAVA_HOME/bin

export PATH=$PATH:$JAVA_HOME/bin

[root@localhost /]# source /etc/profile

查看java是否配置成功

[root@localhost /]# java -version

java version "1.8.0_171"

Java(TM) SE Runtime Environment (build 1.8.0_171-b11)

Java HotSpot(TM) 64-Bit Server VM (build 25.171-b11, mixed mode)

创建文件夹将解压好的tomcat放进创建的文件夹中并更改文件夹名称

[root@localhost /]# mkdir /usr/local/tomcat

[root@localhost /]# mv apache-tomcat-10.0.4 /usr/local/tomcat/

[root@localhost /]# mv /usr/local/tomcat/apache-tomcat-10.0.4 /usr/local/tomcat/server

启动tomcat服务

[root@localhost /]# cd /usr/local/tomcat/server/bin/

[root@localhost bin]# ./startup.sh

Using CATALINA_BASE:   /usr/local/tomcat/server

Using CATALINA_HOME:   /usr/local/tomcat/server

Using CATALINA_TMPDIR: /usr/local/tomcat/server/temp

Using JRE_HOME:        /usr/java/java

Using CLASSPATH:       /usr/local/tomcat/server/bin/bootstrap.jar:/usr/local/tomcat/server/bin/tomcat-juli.jar

Tomcat started.

防火墙放行tomcat端口

[root@localhost bin]# firewall-cmd --add-port=8080/tcp --permanent

success

[root@localhost bin]# firewall-cmd --reload

success

查看开启的tomcat默认网站

删除默认网站，导入要显示的网站

[root@localhost bin]# cd ../

[root@localhost server]# rm -rf webapps/ROOT/*

[root@localhost server]# mv /index.html /usr/local/tomcat/server/webapps/ROOT/

关闭服务并重启服务

[root@localhost server]# cd bin/

[root@localhost bin]# ./shutdown.sh

Using CATALINA_BASE:   /usr/local/tomcat/server

Using CATALINA_HOME:   /usr/local/tomcat/server

Using CATALINA_TMPDIR: /usr/local/tomcat/server/temp

Using JRE_HOME:        /usr/java/java

Using CLASSPATH:       /usr/local/tomcat/server/bin/bootstrap.jar:/usr/local/tomcat/server/bin/tomcat-juli.jar

[root@localhost bin]# ./startup.sh

Using CATALINA_BASE:   /usr/local/tomcat/server

Using CATALINA_HOME:   /usr/local/tomcat/server

Using CATALINA_TMPDIR: /usr/local/tomcat/server/temp

Using JRE_HOME:        /usr/java/java

Using CLASSPATH:       /usr/local/tomcat/server/bin/bootstrap.jar:/usr/local/tomcat/server/bin/tomcat-juli.jar

Tomcat started.

测试web服务（成功）

---

使用JDK自带的工具生成ssl证书，在conf目录下创建

[root@localhost conf]# pwd

/usr/local/tomcat/server/conf

[root@localhost conf]# keytool -genkeypair -alias "tomcat" -keyalg "RSA" -keystore "/usr/local/tomcat/server/conf/tomcat.keystore"

输入密钥库口令:  

再次输入新口令:

您的名字与姓氏是什么?

  [Unknown]:  skills

您的组织单位名称是什么?

  [Unknown]:  skills

您的组织名称是什么?

  [Unknown]:  skills

您所在的城市或区域名称是什么?

  [Unknown]:  zhuhai

您所在的省/市/自治区名称是什么?

  [Unknown]:  zhuhai

该单位的双字母国家/地区代码是什么?

  [Unknown]:  cn

CN=skills, OU=skills, O=skills, L=zhuhai, ST=zhuhai, C=cn是否正确?

  [否]:  y

输入 <tomcat> 的密钥口令

        (如果和密钥库口令相同, 按回车):  

再次输入新口令:

进入tomcat安装目录 找到conf下的server.xml 修改代码

 86

 87     <Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"

 88                maxThreads="150" SSLEnabled="true">

 89         <SSLHostConfig>

 90    <Certificate certificateKeystoreFile="/usr/local/tomcat/server/conf/tomcat.keystore"

 91                          certificateKeystorePassword="P@ssw0rd"

 92                          type="RSA" />

 93         </SSLHostConfig>

 94     </Connector>

关闭服务在重新启动服务

[root@localhost conf]# cd ../

[root@localhost server]# cd bin/

[root@localhost bin]# ./shutdown.sh

Using CATALINA_BASE:   /usr/local/tomcat/server

Using CATALINA_HOME:   /usr/local/tomcat/server

Using CATALINA_TMPDIR: /usr/local/tomcat/server/temp

Using JRE_HOME:        /usr/java/java

Using CLASSPATH:       /usr/local/tomcat/server/bin/bootstrap.jar:/usr/local/tomcat/server/bin/tomcat-juli.jar

Using CATALINA_OPTS:   

[root@localhost bin]# ./startup.sh

Using CATALINA_BASE:   /usr/local/tomcat/server

Using CATALINA_HOME:   /usr/local/tomcat/server

Using CATALINA_TMPDIR: /usr/local/tomcat/server/temp

Using JRE_HOME:        /usr/java/java

Using CLASSPATH:       /usr/local/tomcat/server/bin/bootstrap.jar:/usr/local/tomcat/server/bin/tomcat-juli.jar

Using CATALINA_OPTS:   

Tomcat started.

防火墙放行443端口

[root@localhost bin]# firewall-cmd --add-port=443/tcp --permanent

success

[root@localhost bin]# firewall-cmd --reload

success

使用https协议测试服务（成功）