【SSL證書配置】tomcat實現SSL證書訪問

SSL證書申請可以參考我的博客，這篇博客中還有nginx+tomcat配置ssl方法：https://www.cnblogs.com/HeiDi-BoKe/p/12162324.html

將申請好的證書文件上傳到服務器上，並拷貝到tomcat目錄下

[root@tanbaobao conf]# mkdir cert
[root@tanbaobao conf]# chmod -R +777 cert/
[root@tanbaobao conf]# ls /usr/local/src/自己建立的目錄存放證書文件/Tomcat/
keystorePass.txt   域名.jks  
[root@tanbaobao conf]# cp -r /usr/local/src/存放證書的目錄/Tomcat/ /usr/local/tomcat-2/conf/cert/

修改tomcat的server.xml文件

# 修改8443位443，然后添加443的標簽
# clientAuth：如果設為 true，表示 Tomcat 要求所有的 SSL 客戶出示安全證書，對 SSL 客戶進行身份驗證。
[root@tanbaobao conf]# vi server.xml
    <Connector port="8181" protocol="HTTP/1.1"
               connectionTimeout="20000"
           URIEncoding="UTF-8"
               redirectPort="443" />

<Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol" 
    scheme="https" secure="true" maxThreads="150" SSLEnabled="true">
        <SSLHostConfig>
           <Certificate 
        certificateKeystoreFile="/usr/local/tomcat-2/conf/cert/域名.jks"  
        certificateKeystorePassword="秘鑰文件" 
        clientAuth="false" sslProtocol="TLS"  
        type="RSA"/>
        </SSLHostConfig>
</Connector>

    <Connector port="8010" protocol="AJP/1.3" redirectPort="443" />

    <Engine name="Catalina" defaultHost="localhost">

      <Realm className="org.apache.catalina.realm.LockOutRealm">
        <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
               resourceName="UserDatabase"/>
      </Realm>

      <Host name="localhost"  appBase="webapps"
            unpackWARs="true" autoDeploy="true">

    <Context path="" docBase="beian" debug="0" privileged="true" reloadable="false"/>

       <Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"
               prefix="localhost_access_log" suffix=".txt"
               pattern="%h %l %u %t &quot;%r&quot; %s %b" />
      </Host>

重啟服務

[root@tanbaobao tomcat-2]# ./bin/startup.sh 

瀏覽器訪問https://域名