Tomcat8.5 / 9 安裝ssl證書

Tomcat8.5 / 9 安裝ssl證書

/SSL安裝教程 /Tomcat8.5 / 9 安裝ssl證書

•  2016-08-13

Tomcat 8.5 以上版本支持 SNI （ 同IP能夠安裝多個證書 ）, 至少 jre 7 以上版本

<Connector port="8443"
protocol="org.apache.coyote.http11.Http11Nio2Protocol"
maxThreads="150"
SSLEnabled="true"
defaultSSLHostConfigName="tomcat.getssl.cn" >
<SSLHostConfig hostName="tomcat.getssl.cn" >
<Certificate certificateKeystoreFile="conf/getssl.cn.jks"
certificateKeystorePassword="123456"
type="RSA" />       
</SSLHostConfig>
// 其餘站點複製多個 SSLHostConfig
</Connector>

使用Apache證書安裝SSL

<Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol"
                          maxThreads="150" SSLEnabled="true">
          <SSLHostConfig>
                       <Certificate certificateKeyFile="conf/ssl/server.key"
                            certificateFile="conf/ssl/server.crt"
                            certificateChainFile="conf/ssl/server.ca-bundle"
                            type="RSA" />
         </SSLHostConfig>
</Connector>

protocol 可選: 

org.apache.coyote.http11.Http11NioProtocol - non blocking Java NIO connector
org.apache.coyote.http11.Http11Nio2Protocol - non blocking Java NIO2 connector
org.apache.coyote.http11.Http11AprProtocol - the APR/native connector.

具體的配置參數請參考 tomcat官方文檔

https://tomcat.apache.org/tomcat-9.0-doc/config/http.html