tomcat配置https自签名证书（keytool生成）
tomcat配置https自签名证书（keytool生成）生成keystore
keytool -genkeypair -alias "server" -keyalg "RSA" -validity "365" -keystore "/app/webapp/tomcat/https/server.keystore"
$ pwd
/app/webapp/tomcat/https
$ keytool -genkeypair -alias "server" -keyalg "RSA" -validity "365" -keystore "/app/webapp/tomcat/https/server.keystore"
Enter keystore password:
Re-enter new password:
What is your first and last name?
:10.13.22.102
What is the name of your organizational unit?
:ai
What is the name of your organization?
:ai
What is the name of your City or Locality?
:gz
What is the name of your State or Province?
:gd
What is the two-letter country code for this unit?
:cn
Is CN=10.13.22.102, OU=ai, O=ai, L=gz, ST=gd, C=cn correct?
:yes
Enter key password for
(RETURN if same as keystore password):
Re-enter new password:
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /app/webapp/tomcat/https/server.keystore -destkeystore /app/webapp/tomcat/https/server.keystore -deststoretype pkcs12".
$
修改配置server.xml
$ pwd
/app/webapp/tomcat/apache-tomcat-7.0.88/conf
$ vi server.xml
改为：
保存：
:wq
修改https的tomcat里的默认端口8443（也可不改，用默认的）。
这里修改为18003。共修改三处。另外两处是注释里的，可不修改。
修改tomcat的web.xml，强制http跳转到https
$ pwd
/app/webapp/tomcat/apache-tomcat-7.0.88/conf
$ vi web.xml
后面加上这样一段：
CLIENT-CERT
Client Cert Users-only Area
SSL
/*
CONFIDENTIAL
重启tomcat
$ pwd
/app/webapp/tomcat/apache-tomcat-7.0.88/bin
$ sh shutdown.sh
Using CATALINA_BASE: /app/webapp/tomcat/apache-tomcat-7.0.88
Using CATALINA_HOME: /app/webapp/tomcat/apache-tomcat-7.0.88
Using CATALINA_TMPDIR: /app/webapp/tomcat/apache-tomcat-7.0.88/temp
Using JRE_HOME: /opt/jdk1.8.0_151
Using CLASSPATH: /app/webapp/tomcat/apache-tomcat-7.0.88/bin/bootstrap.jar:/app/webapp/tomcat/apache-tomcat-7.0.88/bin/tomcat-juli.jar
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option PermSize=256m; support was removed in 8.0
Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=256m; support was removed in 8.0
$ sh startup.sh
Using CATALINA_BASE: /app/webapp/tomcat/apache-tomcat-7.0.88
Using CATALINA_HOME: /app/webapp/tomcat/apache-tomcat-7.0.88
Using CATALINA_TMPDIR: /app/webapp/tomcat/apache-tomcat-7.0.88/temp
Using JRE_HOME: /opt/jdk1.8.0_151
Using CLASSPATH: /app/webapp/tomcat/apache-tomcat-7.0.88/bin/bootstrap.jar:/app/webapp/tomcat/apache-tomcat-7.0.88/bin/tomcat-juli.jar
Tomcat started.
访问
http://10.13.22.102:18002/ops/app
自动跳转：
https://10.13.22.102:18003/ops/app
页:
[1]