Tomcat7默认配置启用SSL与APR+SSL

为什么80%的码农都做不了架构师？>>>   

配置Tomcat7的SSL时需要注意两种情况：

一、默认配置，即BIO/NIO模式下启用SSL

<Connector port="8443" protocol="HTTP/1.1"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               keystorefile="${catalina.base}/conf/xx.jks"
               keystorepass="pwd"   clientAuth="false" sslProtocol="TLS" />

二、启用APR+SSL

<Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               SSLCertificateFile="${catalina.base}/conf/xxx.crt"
               SSLCertificateKeyFile="${catalina.base}/conf/xxx.key"
               clientAuth="false" sslProtocol="TLS" />

转载于:https://my.oschina.net/scoder/blog/638299