Tomcat SSL Configuration

Source: Internet
Author: User

Tomcat HTTPS access configuration. Different Versions of Tomcat have different configurations. The following configurations are two-way authentication.

Requirements: have a certain understanding of Java certificates and certification tools (keytool, you can check the functions of keytool online ).

For Tomcat requirements, Tomcat can be started normally before SSL is configured.

Note: You must put trusted files such as keystore. jsk under the conf directory of the tomcat installation directory.

Tomcat5's SSL configuration XP system, jdk1.5:

<Connector Port = "8443" clientauth = "true" DEBUG = "0" <br/> disableuploadtimeout = "true" enablelookups = "false" <br/> keystorefile = "CONF/ keystore. jks "<br/> keystorepass =" 111111 "keystoretype =" jks "<br/> maxsparethreads =" 75 "maxthreads =" 150 "<br/> minsparethreads =" 25 "acceptcount = "100" Scheme = "HTTPS" <br/> secure = "true" sslprotocol = "TLS" <br/> truststorefile = "CONF/keystore. jks "<br/> truststorepass =" 111111 "truststoretype =" jks "/>

A Brief Introduction to keystorefile = 'keystore. jks 'is a certificate file. For other formats, see Certificate-related documents.

Keystorepass = '000000' indicates the password used to access the keystore. jsk file. clientauth = 'true' indicates two-way authentication, and false indicates one-way authentication.

Not to mention anything else,

The above connector configuration can basically implement SSL in the XP System

Tomcat 6's ssl xp system, JDK:

</P> <p> <connector Port = "8443" protocol = "org. apache. coyote. http11.http11protocol "sslenabled =" true "<br/> maxthreads =" 150 "Scheme =" HTTPS "secure =" true "<br/> clientauth =" true "sslprotocol =" TLS" <br/> keystorefile = "CONF/keystore. jks "keystorepass =" 111111 "<br/> truststorefile =" CONF/keystore. jks "truststorepass =" 111111 "<br/>

Not to mention:

Tomcat7 SSL Configuration

<! -- <Br/> <listener classname = "org. apache. catalina. core. aprlifecyclelistener "sslengine =" on "/> --> comment out the listener </P> <p> <connector Port =" 8443 "protocol =" HTTP/1.1 "sslenabled =" true "<br/> maxthreads =" 150 "Scheme =" HTTPS "secure =" true "<br/> keystorefile =" CONF/keystore. jks "keystorepass =" 111111 "keystoretype =" jks "<br/> truststorefile =" CONF/keystore. jks "<br/> truststorepass =" 111111 "truststoretype =" jks "<br/> clientauth =" true "sslprotocol =" TLS "/>

 

 

The above is the SSL configuration of Tomcat versions. I hope it will be helpful to you.

 

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.