"Protocol= "http/1.1"sslenabled= "true"MaxThreads= "Max"Scheme= "https"Secure= "true"ClientAuth= "false"Sslprotocol= "TLS"Keystorefile= "/etc/tomcat.keystore"Keystorepass= "www.gbcom.com.cn"/>Note: Two parameters, identified as light blue, are the location of the certificate file and the master password of -- >modifying parameters=port= "8009" enablelookups= "false" protocol= " ajp/1.3 " redirectport=" 443 "/>3) Open $CATALINA _home/conf/web.xml and add at the end of the file: 2. Force HT
, the server certificate is the private key keystore file: Example.jks is used in SSL configuration. First copy this file to the following location:C:\bea\user_projects\domains\base_domain is the root directory of the domain.the commands in Aix are as follows :CP example.jks/home/eteller/base_domain/Weblogic ConfigurationTurn on the SSL serviceSet KeyStorePassword 4 are the 123456 that were previously requested to generate Example.jksSetting Up SSLThis private Key alias: is the alias of our serv
you want to convert all requests to an HTTPS connection, you can modify port 8443 to 443 port and modify the Web. XML under the Conf folder, adding the following paragraph after the
>
--and
web-resource-collection >
web-resource-name >sslweb-resource-name>
url-pattern>/*url-pattern>
web-resource-collection>
user-data-constraint>
transport-guarantee>confidentialtransport-guarantee>
user-data-constraint>
se
"Sslenabled="true"MaxThreads=" Max"Scheme="HTTPS"Secure="true"ClientAuth="false"Sslprotocol="TLS"Keystorefile="E:\tomcat.keystore"Keystorepass="123456"/>On the Internet, the default port for the HTTP protocol is 443, and the default port for HTTPS is 443.3.HTTP Automatic Jump ConfigurationConfigure Tomcat, open $CATALINA _home/conf/server.xml, and modify the following "8080" protocol="http/1.1" ConnectionTimeout="20000" redirectport=" 8443" />Revision changed to "
First you need to configure HTTPS one-way or two-way linksReference:tomcat7.0.55 Configuring one-way and two-way HTTPS connections (two)Then edit the Web. XML under Tomcat's CONF directoryAdd after Login-config> Authorization setting for SSL - Auth-method>Client-certAuth-method> Realm-name>Client Cert users-only AreaRealm-name> Login-config> Security-constraint> Authorization setting for SSL - web-resource-collection> Web-resource-name>
modify the Tomcat-->conf-->web.xml configuration, add Security-constraint> web-resource-collection> Web-resource-name>SslWeb-resource-name> Url-pattern>/*Url-pattern> web-resource-collection> User-data-constraint> Transport-guarantee>ConfidentialTransport-guarantee> User-data-constraint> Security-constraint> Note: The Url-pattern is modified to suit your needs, or
/web.xml, and at last add the following to make HTTPS mandatory access: Login-config>Auth-method>client-certAuth-method>Realm-name>client Cert users-only AreaRealm-name>Login-config>Security-constraint>web-resource-collection > Web-resource-name >sslweb-resource-name> url-pattern>/* url-pattern> web-resource-collection> user-data-constraint> transport-guarantee>confidential transport-guarantee> user-data-constraint> security-constraint> This
" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" keystoreFile="conf\www.domain.com.jks" keystorePass="changeit" clientAuth="false" sslProtocol="TLS" /> 4.3 Security configuration for HTTP auto-jump HTTPSto Web. XML under the Conf directory. In the back, that is, the penultimate paragraph, plus such a web-resource-collection > web-resource-name >sslweb-resource-name> url-pattern>/*url-pattern> web-resource-collec
authenticate the client certificate, in this case the server certificate (although not used, but is used since the issue)truststorepass: Root certificate password (although not used, but is used since the issue)Www.xxxx.com.jks is the certificate obtained from the authority, Keystorepass fill in the corresponding password.Step Three:Copy the project to WebApps and WEBAPPS2, and then run startup, Access. This will be a success.Add: 1, HTTP automatic jump HTTPS security configuration:to Web. XML
123456-keystore E:/tomcat.keystore 2. Configuring Server.xml for SSL Monitoring ConnectorProtocol= "Org.apache.coyote.http11.Http11NioProtocol"Port= "8443"minsparethreads= "5"maxsparethreads= " the"enablelookups= "true"Disableuploadtimeout= "true"Acceptcount= "+"MaxThreads= "$"Scheme= "https"Secure= "true"sslenabled= "true"ClientAuth= "false"Sslprotocol= "TLS"Keystorefile= "E:/tomcat.keystore"Keystorepass= "123456"/> 3. (optionally) Configure Web. XML directly to complete the interception of
Contact Us
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.