tomcat ssl证书 https配置

先记得配置安全组 443

阿里云SSL控制台下载SSL证书并解压

把解压的文件放入远程服务器Tomcat目录下的conf目录

进入Tomcat conf目录配置server.xml文件，需要修改两个地方

一个 端口号

<Connector port="80" protocol="HTTP/1.1"
           connectionTimeout="20000"
           redirectPort="443" maxHttpHeaderSize="500000"/>
1
2
3

一个 证书的路径和密码

<Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true">
	<SSLHostConfig>
			   <Certificate certificateKeystoreFile="证书路径/证书全拼"
					certificateKeystoreType="PKCS12" 
					certificateKeystorePassword="证书密码" />
   </SSLHostConfig>			   			   
</Connector>
1
2
3
4
5
6
7
8

http自动重定向到https 修改web.xml，放到最后

<security-constraint>
    <web-resource-collection >
              <web-resource-name >SSL</web-resource-name>
              <url-pattern>/*</url-pattern>
       </web-resource-collection>
 
       <user-data-constraint>
       <transport-guarantee>CONFIDENTIAL</transport-guarantee>
       </user-data-constraint>
 </security-constraint>
1
2
3
4
5
6
7
8
9
10

然后重启tomcat