tomcat配置https

1、开启使用https协议

编辑tomcat目录下的conf/server.xml文件

<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150"
scheme="https"secure="true"clientAuth="false" sslProtocol="TLS"
keystoreFile="keystore/SSL.jks" keystorePass="XXXX" />

keystoreFile:证书路径(相对与tomcat主目录，例如：conf/SSL.jks)

keystorePass：证书密码

2、强制使用https协议

在 tomcat主目录的 conf/web.xml 中的 </welcome- file-list>节点后面加上这

 <login-config>  
    <!-- Authorization setting for SSL -->  
    <auth-method>CLIENT-CERT</auth-method>  
    <realm-name>Client Cert Users-only Area</realm-name>  
 </login-config>  
 <security-constraint>  
     <!-- Authorization setting for SSL -->  
     <web-resource-collection >  
         <web-resource-name >SSL</web-resource-name>  
         <url-pattern>/*</url-pattern>  
     </web-resource-collection>  
     <user-data-constraint>  
         <transport-guarantee>CONFIDENTIAL</transport-guarantee>  
     </user-data-constraint>  
 </security-constraint>