首先生成证书说明
keytool -genkey -alias castest -keyalg RSA -keystore c:/keys/caskey
先让输入密码,密码必须记住,下面会用到
其中“您的名字与姓氏是什么?”这是必填项,并且必须是TOMCAT部署主机的域名或者IP[如:gbcom.com 或者 10.1.25.251](就是你将来要在浏览器中输入的访问地址),否则浏览器会弹出警告窗口,提示用户证书与所在域不匹配。在本地做开发测试时,应填 入“localhost”。
导出证书
keytool -export -file c:keyscas.crt -alias castest -keystore c:keyscaskey
导入到服务端
keytool -import -keystore "C:Program Files (x86)Javajdk1.8.0_73jrelibsecuritycacerts" -file c:keyscas.crt -alias castest
2.配置tomcat
<Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" /> <!-- A "Connector" using the shared thread pool--> <!-- <Connector executor="tomcatThreadPool" port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" /> --> <!-- Define a SSL HTTP/1.1 Connector on port 8443 This connector uses the BIO implementation that requires the JSSE style configuration. When using the APR/native implementation, the OpenSSL style configuration is required as described in the APR/native documentation --> <!-- protocol="org.apache.coyote.http11.Http11Protocol" --> <Connector port="8443" protocol="HTTP/1.1" maxThreads="150" SSLEnabled="true" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="c:keyscaskey" keystorePass="123456"/>
主要是配置keystoreFile 为证书说明 和 keystorePass 位上面输入的密码
其他:参考度娘