参考:java的加密解密艺术一书
单项认证配置方式:
<Connector port="443"
protocol="org.apache.coyote.http11.Http11NioProtocol"
SSLEnabled="true"
maxThreads="150"
scheme="https"
secure="true"
clientAuth="false"
sslProtocol="TLS"
keystoreFile="C:/Users/Administrator/zlex.keystore "
keystorePass="123456"/>
双项认证配置方法:
<Connector port="443"
SSLEnabled="true"
clientAuth="true"
maxThreads="150"
protocol="org.apache.coyote.http11.Http11Protocol"
scheme="https"
secure="true"
sslProtocol="TLS"
keystoreFile="D:/ca/certs/server.p12"
keystorePass="123456"
keystoreType="PKCS12"
truststoreFile="D:/ca/certs/ca.p12"
truststorePass="123456"
truststoreTypt="PKCS12"/>