tomcat https 配置

Linux下的操作

1. 在jdk的bin下找到是否有keytool，执行下面的语句

./keytool -genkey -alias tomcat -keyalg RSA -keystore /home/gavin/tomcat_https/conf/keystore

会需要你输入密码，下面的一些信息你可以不输入直接按回车，最后[no]敲y， 最后一个密码是为tomcat的，可以另外输入，如果和之前的一样也可以不输入。

Enter keystore password:

Re-enter new password:

What is your first and last name?

[Unknown]:

What is the name of your organizational unit?

[Unknown]:

What is the name of your organization?

[Unknown]:

What is the name of your City or Locality?

[Unknown]:

What is the name of your State or Province?

[Unknown]:

What is the two-letter country code for this unit?

[Unknown]:

Is CN=Unknown, OU=Unknown, O=Unknown, L=Unknown, ST=Unknown, C=Unknown correct?

[no]: y

Enter key password for <tomcat>

(RETURN if same as keystore password):

Re-enter new password:

2. 配置tomcat的server.xml

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"

maxThreads="150" scheme="https" secure="true"

clientAuth="false" sslProtocol="TLS"

keystoreFile="/home/gavin/tomcat_https/conf/keystore" keystorePass="123456"

/>

找到8443的那个端口，反注释掉，并且加上一行。keystroeFile是你刚刚生成的key文件，keystorePass是你Enter key password for <tomcat>输入的密码。

keystoreFile="/home/gavin/tomcat_https/conf/keystore" keystorePass="123456"

3. 在webapps下放入test项目，启动tomcat

在地址栏上输入：https://127.0.0.1:8443/test，是否继续。

Window 下的配置也是一样的。但是启动，会出现说找不到证书的错误，网上查到了一个解决方法是将protocol=HTTP/1.1改为org.apache.coyote.http11.Http11Protocol

java.lang.Exception: No Certificate file specified or invalid file format

at org.apache.tomcat.jni.SSLContext.setCertificate(Native Method)

at org.apache.tomcat.util.net.AprEndpoint.init(AprEndpoint.java:733)

at org.apache.coyote.http11.Http11AprProtocol.init(Http11AprProtocol.java:107)

at org.apache.catalina.connector.Connector.initialize(Connector.java:1022)

at org.apache.catalina.core.StandardService.initialize(StandardService.java:703)

at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:838)

at org.apache.catalina.startup.Catalina.load(Catalina.java:538)

at org.apache.catalina.startup.Catalina.load(Catalina.java:562)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

at java.lang.reflect.Method.invoke(Unknown Source)

at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:261)

at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)

Jul 15, 2015 2:22:11 PM org.apache.catalina.core.StandardService initialize

SEVERE: Failed to initialize connector [Connector[HTTP/1.1-8443]]

LifecycleException: Protocol handler initialization failed: java.lang.Exception: No Certificate file specified or invalid file format

at org.apache.catalina.connector.Connector.initialize(Connector.java:1024)

at org.apache.catalina.core.StandardService.initialize(StandardService.java:703)

at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:838)

at org.apache.catalina.startup.Catalina.load(Catalina.java:538)

at org.apache.catalina.startup.Catalina.load(Catalina.java:562)

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

at java.lang.reflect.Method.invoke(Unknown Source)

at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:261)

at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)

Jul 15, 2015 2:22:11 PM org.apache.coyote.ajp.AjpAprProtocol init

SEVERE: Error initializing endpoint