Enable https for Tomcat

1. Generate key

   $ Java_home/bin/keytool-genkey-alias tomcat-keyalg RSA

   # $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSAEnter keystore password:Re-enter new password:What is your first and last name?  [Unknown]:  YourNameWhat is the name of your organizational unit?  [Unknown]:  YourOrgUnitWhat is the name of your organization?  [Unknown]:  YourOrgWhat is the name of your City or Locality?  [Unknown]:  YourCityWhat is the name of your State or Province?  [Unknown]:  YourStateWhat is the two-letter country code for this unit?  [Unknown]:  CNIs CN=YourName, OU=YourOrgUnit, O=YourOrg, L=YourCity, ST=YourState, C=CN correct?  [no]:  yesEnter key password for <tomcat>        (RETURN if same as keystore password):  Re-enter new password:

   Note: The "master password" entered above must be the same as the keystore password; otherwise, Tomcat cannot start.

2. Then copy the generated. keystore file to the $ catalina_base/conf directory.

3. Edit $ catalina_base/CONF/server. xml

   Open the following configuration

   <Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"               maxThreads="150" scheme="https" secure="true"               clientAuth="false" sslProtocol="TLS"               keystoreFile="./conf/.keystore" keystorePass="password"               />

   • Keystorefile: The certificate file just created. The relative directory is used here, that is, the Tomcat root directory.
   • Keystorepass: The password you entered when creating the certificate.

4. Start Tomcat