TOMCAT配置HTTPS和SSL并HTTP请求强转为HTTPS请求

1、生成keystore文件
 
keytool -v -genkey -alias tomcat -keyalg RSA -keystore d:/tomcat.keystore
2. 取消注释  tomcat/conf/server.xml ，并指定安全证书位置和密码
1   <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
2                  maxThreads="150" scheme="https" secure="true"
3                  clientAuth="false" sslProtocol="TLS"
4                  keystoreFile="D:/tomcat7/conf/keystore/tomcat.keystore"
5                  keystorePass="123456"/>
 
3. 所有http请求强转为HTTPS请求
 
对应的业务工程下web.xml配置最后
01  <security-constraint>
02  <!-- Authorization setting for SSL -->
03  <web-resource-collection>
04  <web-resource-name>OPENSSL</web-resource-name>
05  <url-pattern>/*</url-pattern>
06  </web-resource-collection>
07  <user-data-constraint>
08  <transport-guarantee>CONFIDENTIAL</transport-guarantee>
09  </user-data-constraint>
10  </security-constraint>
 
 
附加：
 
禁用HTTP不安全的方法：
 
在tomcat/conf/web.xml最后加上一个节点
01  <!--禁用HTTP的不安全方法-->
02      <security-constraint>  
03          <web-resource-collection>  
04              <url-pattern>/*</url-pattern>  
05              <http-method>PUT</http-method>  
06              <http-method>DELETE</http-method>  
07              <http-method>HEAD</http-method>  
08              <http-method>OPTIONS</http-method>  
09              <http-method>TRACE</http-method>  
10          </web-resource-collection>  
11          <auth-constraint></auth-constraint>  
12      </security-constraint>