Ubuntu Configuration Tomcat 443 (HTTPS):
Generate the. keystore file:
Keytool-genkey-alias Tomcat-keyalg RSA
Enter keystore Password:
Re-enter new password:
What's your first and last name?
What is the name of your organizational unit?
What is the name of your organization?
What's the name of your city or Locality?
What's the name of your state or province?
What's the Two-letter country code for this unit?
Is Cn=aa, Ou=aa, O=aa, L=aa, ST=AA, C=aa correct?
Enter Key password for <tomcat>
(RETURN if same as KeyStore password):
Re-enter new password:
Warning:
The JKS KeyStore uses a proprietary format. It is recommended to migrate to PKCS12 which are an industry standard format using "keytool-importkeystore-srckeystore/r Oot/.keystore-destkeystore/root/.keystore-deststoretype pkcs12 ".
Mv/root/.keystore/var/lib/tomcat7/conf/vi/var/lib/tomcat7/conf/server.xml
<connector port= "8443" protocol= "Org.apache.coyote.http11.Http11Protocol"
Maxthreads= "sslenabled=" true "scheme=" "https" secure= "true"
Clientauth= "false" sslprotocol= "TLS" keystorefile= "/var/lib/tomcat7/conf/.keystore" keystorepass= "xxxxx"/>
: Wq
Service TOMCAT7 RESTARTNETSTAT-NPLT | grep 8443 (8443 port at this time) apt-get install AUTHBINDVI/ETC/DEFAULT/TOMCAT7
Authbind=yes (default = #authbind=no)
: Wq
Touch/etc/authbind/byport/443chown Tomcat7:tomcat7/etc/authbind/byport/443chmod 0755/etc/authbind/byport/443vi/ Var/lib/tomcat7/conf/server.xml
: 1,$ s/8443/443/g
: Wq
Service TOMCAT7 RESTARTNETSTAT-NPTL | grep 443
Ubuntu Configuration Tomcat 443 (HTTPS)