使用keytool產生RSA
cd /usr/java/jdk1.7.0_21/bin/
./keytool -genkey -alias tomcat -keyalg RSA
Enter keystore password:
Re-enter new password:
What is your first and last name?
What is the name of your organizational unit?
What is the name of your organization?
What is the name of your City or Locality?
What is the name of your State or Province?
What is the two-letter country code for this unit?
Is CN=udn, OU=udn, O=udn, L=taipei, ST=taiwan, C=TW correct?
Enter key password for
(RETURN if same as keystore password):
然後在編輯server.xml
vim /usr/data/apache-tomcat-7.0.40/conf/server.xml
取消對Connector port=”8443″的註解，增加keystorePass的描述
|
1 2 3 |
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" keystorePass="keytool時設定的pass" clientAuth="false" sslProtocol="TLS" /> |
最後在重新啟動tomcat