Windows下tomcat6配置https(SSL)

一、使用JDK1.6的keytool命令生成keystore文件，命令如下：

%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA -keystore /path/keystore

如下图：[img]http://dl2.iteye.com/upload/attachment/0089/2318/661d74d8-c87f-3680-8a1d-4a686b220f16.png[/img]

二、在server.xml中去掉如下代码的注释

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" />

并添加如下代码

keystoreFile="conf\tomcat.key" keystorePass="123456"

,最终结果代码如下(见附件server.xml.rar)：

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
               maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS"
			   keystoreFile="conf\tomcat.key" keystorePass="123456" />

启动tomcat6并在浏览器中输入http://127.0.0.1:8443,若显示出了tomcat界面，则说明配置成功！


备注：若出现

java.lang.Exception: No Certificate file specified or invalid file format

错误信息，则将tomcat6的bin目录下的tcnative-1.dll文件删除并重启

[url=http://blog.csdn.net/supersky07/article/details/7407523]tomcat下配置https环境[/url]

[url=http://my.oschina.net/heguangdong/blog/28632]tomcat配置单向ssl[/url]

[url=http://www.csdnjava.com/thread-27785-1-1.html]tomcat配置https小经验[/url]

[url=http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html]SSL Configuration HOW-TO[/url]

[url=http://www.blogjava.net/wyz191/articles/89502.html]Tomcat配置集锦(汇总)[/url]