TOMCAT使用SSL(https)
来源:互联网 发布:spss难学吗,知乎 编辑:程序博客网 时间:2024/06/11 10:22
Setting Up SSL on Tomcat in 5 minutes (https://localhost:8443)
This tutorial will walk you through how to configure SSL (https://localhost:8443 access) on Tomcat in 5 minutes.
For this tutorial you will need:
- Java SDK (used version 6 for this tutorial)
- Tomcat (used version 7 for this tutorial)
The set up consists in 3 basic steps:
- Create a keystore file using Java
- Configure Tomcat to use the keystore
- Test it
- (Bonus ) Configure your app to work with SSL (access through https://localhost:8443/yourApp)
1 – Creating a Keystore file using Java
Fisrt, open the terminal on your computer and type:
Windows:
cd %JAVA_HOME%/bin
Linux or Mac OS:
cd $JAVA_HOME/bin
The $JAVA_HOME on Mac is located on “/System/Library/Frameworks/JavaVM.framework/Versions/{your java version}/Home/”
You will change the current directory to the directory Java is installed on your computer. Inside the Java Home directory, cd to the bin folder. Inside the bin folder there is a file named keytool. This guy is responsible for generating the keystore file for us.
Next, type on the terminal:
keytool -genkey -alias tomcat -keyalg RSA
When you type the command above, it will ask you some questions. First, it will ask you to create a password (My password is “password“):
loiane:bin loiane$ keytool -genkey -alias tomcat -keyalg RSAEnter keystore password: passwordRe-enter new password: passwordWhat is your first and last name? [Unknown]: Loiane GronerWhat is the name of your organizational unit? [Unknown]: homeWhat is the name of your organization? [Unknown]: homeWhat is the name of your City or Locality? [Unknown]: Sao PauloWhat is the name of your State or Province? [Unknown]: SPWhat is the two-letter country code for this unit? [Unknown]: BRIs CN=Loiane Groner, OU=home, O=home, L=Sao Paulo, ST=SP, C=BR correct? [no]: yes Enter key password for (RETURN if same as keystore password): passwordRe-enter new password: password
It will create a .keystore file on your user home directory. On Windows, it will be on: C:Documents and Settings[username]; on Mac it will be on /Users/[username] and on Linux will be on /home/[username].
2 – Configuring Tomcat for using the keystore file – SSL config
Open your Tomcat installation directory and open the conf folder. Inside this folder, you will find the server.xml file. Open it.
Find the following declaration:
<!--<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" />-->
Uncomment it and modify it to look like the following:
<Connector SSLEnabled="true" acceptCount="100" clientAuth="false" disableUploadTimeout="true" enableLookups="false" maxThreads="25" port="8443" keystoreFile="/Users/loiane/.keystore" keystorePass="password" protocol="org.apache.coyote.http11.Http11NioProtocol" scheme="https" secure="true" sslProtocol="TLS" />
Note we add the keystoreFile, keystorePass and changed the protocol declarations.
3 – Let’s test it!
Start tomcat service and try to access https://localhost:8443. You will see Tomcat’s local home page.
Note if you try to access the default 8080 port it will be working too: http://localhost:8080
4 – BONUS - Configuring your app to work with SSL (access through https://localhost:8443/yourApp)
To force your web application to work with SSL, you simply need to add the following code to your web.xml file (before web-app tag ends):
<security-constraint> <web-resource-collection> <web-resource-name>securedapp</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint></security-constraint>
The url pattern is set to /* so any page/resource from your application is secure (it can be only accessed with https). The transport-guarantee tag is set toCONFIDENTIAL to make sure your app will work on SSL.
If you want to turn off the SSL, you don’t need to delete the code above from web.xml, simply change CONFIDENTIAL to NONE.
Reference: http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html (this tutorial is a little confusing, that is why I decided to write another one my own).
Happy Coding!
- TOMCAT使用SSL(https)
- tomcat配置https以及nginx使用ssl模块配置HTTPS
- Tomcat配置Https (SSL)
- tomcat + ssl + (http ---> https)
- tomcat配置ssl,https
- tomcat https ssl设置
- Nginx SSL+Tomcat https
- 使用HttpClient发送HTTPS请求以及配置Tomcat支持SSL
- 配置Tomcat使用https协议(配置SSL协议)
- 配置Tomcat使用https协议(配置SSL协议)
- 使用HttpClient发送HTTPS请求以及配置Tomcat支持SSL
- Tomcat使用https协议(配置SSL协议) -xgh
- 配置Tomcat使用https协议(配置SSL协议)
- 配置Tomcat使用https协议(配置SSL协议)
- 配置Tomcat使用https协议(配置SSL协议)
- 配置Tomcat使用https协议(配置SSL协议)
- 配置Tomcat使用https协议(配置SSL协议)
- 配置Tomcat使用https协议(配置SSL协议)
- Swift初次探究
- 查询手机归属地phoneAddress.class.php
- 2014年大二学习数据结构
- recvfrom()收到数据,没有填充struct sockaddr和len
- DllMain简介
- TOMCAT使用SSL(https)
- NSURLConnection 下载文件增强版
- android源码大放送啦(实战开发必备)
- Linux虚拟机用命令关机
- 真正用来学习微机原理及汇编的好书
- sgu160:Magic Multiplying Machine
- WinPcap学习(十一)底层学习
- [图论] LCA(最近公共祖先)Tarjan 离线算法
- Android 属性动画(Property Animation) 完全解析 (上)