Ubuntu配置tomcat 443（https）

萨尔法保护

　　Ubuntu配置tomcat 443（https）：
　　生成.keystore文件：
keytool -genkey -alias tomcat -keyalg RSA
　　Enter keystore password:  
Re-enter new password:
What is your first and last name?
　　What is the name of your organizational unit?
　　What is the name of your organization?
　　What is the name of your City or Locality?
　　What is the name of your State or Province?
　　What is the two-letter country code for this unit?
　　Is CN=aa, OU=aa, O=aa, L=aa, ST=aa, C=aa correct?
　　Enter key password for
(RETURN if same as keystore password):  
Re-enter new password:
　　Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /root/.keystore -destkeystore /root/.keystore -deststoretype pkcs12".
mv /root/.keystore /var/lib/tomcat7/conf/
vi /var/lib/tomcat7/conf/server.xml
　　
　　:wq
service tomcat7 restart
netstat -nplt | grep 8443   （此时为8443端口）
apt-get install authbind
vi /etc/default/tomcat7
　　AUTHBIND=yes  （默认为#AUTHBIND=no）
:wq
touch /etc/authbind/byport/443
chown tomcat7:tomcat7 /etc/authbind/byport/443
chmod 0755 /etc/authbind/byport/443
vi /var/lib/tomcat7/conf/server.xml
　　:1,$ s/8443/443/g
:wq
service tomcat7 restart
netstat -nptl | grep 443
　　将password改为密文：
　　到下面网址进行加密，将输出的密文密码写到server.xml文件里
　　http://coderstoolbox.net/string/#!encoding=xml&action=encode&charset=none