tomcat配置SSL步骤

最新推荐文章于 2025-08-13 20:47:25 发布

原创最新推荐文章于 2025-08-13 20:47:25 发布 · 2.6k 阅读

0 ·

本内容遵循CC 4.0 BY-SA版权协议

标签

#tomcat #java #ssl

java 专栏收录该内容

163 篇文章

订阅专栏

本文介绍如何在Tomcat中配置HTTPS，包括自签名证书的生成、server.xml与web.xml文件的修改，以及如何设置URIEncoding确保正确重定向。

生成证书

 $ JAVA_HOME/bin/keytool -v -genkey -alias tomcat -keyalg RSA -keystore /Users/xiaoo_gan/Downloads/tomcat.keystore

 $ JAVA_HOME/bin/keytool -exportcert -alias tomcat -keystore /Users/xiaoo_gan/Downloads/tomcat.keystore -file /Users/xiaoo_gan/Downloads/tomcat.cer

按提示完成问答,即可生成证书
PS:问题 What is your first and last name? 填写本机IP地址，本地测试可以填写localhost

配置`tomcat/conf/server.xml`

找到Connector port="8443",改为

      <Connector port="8443" 
      protocol="HTTP/1.1" 
      SSLEnabled="true"   
      maxThreads="150" 
      scheme="https" 
      secure="true" 
      clientAuth="false" 
      keystoreFile="/Users/xiaoo_gan/Downloads/tomcat.keystore" 
      keystorePass="tomcat"
      sslProtocol="TLS" />

keystoreFile: 为步骤1生成证书的位置
keystorePass: 为步骤1生成证书时设置的密码

配置项目WEB_INF/web.xml (非spring－security项目)

添加

<login-config>
    <!-- Authorization setting for SSL -->
    <auth-method>CLIENT-CERT</auth-method>
    <realm-name>Client Cert Users-only Area</realm-name>
</login-config>
<security-constraint>
    <!-- Authorization setting for SSL -->
    <web-resource-collection>
        <web-resource-name>SSL</web-resource-name>
        <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
</security-constraint>

配置URIEncoding=”UTF-8”

问题：由于将`http`转成`https`，`http:8080`重定向到`https:8443`

所以在tomcat中端口号8080所在的Connector设置URIEncoding="UTF-8"不再起作用，

    <Connector port="8080" 
        protocol="HTTP/1.1"
        URIEncoding="UTF-8"
        connectionTimeout="20000"
        redirectPort="8443"
        useBodyEncodingForURI="true"/>

故应该在端口8443所在的Connector中设置URIEncoding="UTF-8"

    <Connector port="8443" 
      protocol="HTTP/1.1" 
      SSLEnabled="true"   
      maxThreads="150" 
      scheme="https" 
      secure="true" 
      clientAuth="false" 
      keystoreFile="D:\tomcat.keystore" 
      keystorePass="tomcat"
      sslProtocol="TLS"
      URIEncoding="UTF-8"/>