1.使用keytool工具生成keystore文件
%JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA
輸入keystore密碼: envoydada
您的名字與姓氏是什么?
[Unknown]: IT-0010381
您的組織單位名稱是什么?
[Unknown]: it_sd
您的組織名稱是什么?
[Unknown]: usish
您所在的城市或區域名稱是什么?
[Unknown]: sh
您所在的州或省份名稱是什么?
[Unknown]: sh
該單位的兩字母國家代碼是什么
[Unknown]: CN
CN = IT - 0010381 , OU = it_sd, O = usish, L = sh, ST = sh, C = CN 正確嗎?
[否]: y
輸入 < tomcat > 的主密碼
(如果和 keystore 密碼相同,按回車):
您的名字與姓氏是什么?
[Unknown]: IT-0010381
您的組織單位名稱是什么?
[Unknown]: it_sd
您的組織名稱是什么?
[Unknown]: usish
您所在的城市或區域名稱是什么?
[Unknown]: sh
您所在的州或省份名稱是什么?
[Unknown]: sh
該單位的兩字母國家代碼是什么
[Unknown]: CN
CN = IT - 0010381 , OU = it_sd, O = usish, L = sh, ST = sh, C = CN 正確嗎?
[否]: y
輸入 < tomcat > 的主密碼
(如果和 keystore 密碼相同,按回車):
(必須密碼一致,因此直接回車)
然后再把userhome(例如:C:\Documents and Settings\Administrator\)下的.keystore復制到tomcat的conf\目錄下。
2.修改Tomcat的 server.xml文件
<
Connector port
=
"
8443
"
maxThreads = " 150 " minSpareThreads = " 25 " maxSpareThreads = " 75 "
enableLookups = " false " disableUploadTimeout = " true "
acceptCount = " 100 " scheme = " https " secure = " true "
clientAuth = " false " sslProtocol = " TLS "
keystoreFile = " conf/.keystore "
keystorePass = "envoydada " > <!-- 與先前設置的密碼一致 -->
</ Connector >
maxThreads = " 150 " minSpareThreads = " 25 " maxSpareThreads = " 75 "
enableLookups = " false " disableUploadTimeout = " true "
acceptCount = " 100 " scheme = " https " secure = " true "
clientAuth = " false " sslProtocol = " TLS "
keystoreFile = " conf/.keystore "
keystorePass = "envoydada " > <!-- 與先前設置的密碼一致 -->
</ Connector >
啟動Tomcat,訪問地址 https://IT-0010381:8443 將出現安全對話框,
(注:其中如果安全提示中出現"安全證書上的名稱無效,或者與站點名稱不匹配",則有可能是你在地址欄中訪問的URL主機名與你在建立keystore文件時填寫的名稱不符——即見以上紅色文字)