5Tomcat网站搭建

Posted 2022-04-25 荆小溪

Tomcat网站搭建

http默认网站配置

Tomcat下载

https://tomcat.apache.org/download-10.cgi

jdk下载

https://www.oracle.com/java/technologies/downloads/

上传至Linux系统Alt+P

[root@linux ~]# ll 
total 195404
-rw-------. 1 root root      1096 Mar 15 13:34 anaconda-ks.cfg
-rw-r--r--. 1 root root         0 Mar 28 23:54 ansible.txt
-rw-r--r--. 1 root root  11898821 Mar 21 11:22 apache-tomcat-10.0.18.tar.gz
-rw-r--r--. 1 root root 188173501 Mar 29 18:20 openjdk-18_linux-x64_bin.tar.gz
[root@linux ~]# mkdir tomcat
[root@linux ~]# tar -zxvf apache-tomcat-10.0.18.tar.gz  -C tomcat
[root@linux ~]# tar -zxvf openjdk-18_linux-x64_bin.tar.gz
[root@linux ~]# ll
total 12
-rw-------. 1 root root 1096 Mar 15 13:34 anaconda-ks.cfg
-rw-r--r--. 1 root root    0 Mar 28 23:54 ansible.txt
drwxr-xr-x. 8 root root   96 Mar 30 02:16 jdk-18
drwxr-xr-x. 9 root root  238 Mar 30 03:19 tomcat

添加Java环境变量

[root@linux ~]# vim /etc/profile
export JAVA_HOME=/root/jdk-18
export PATH=$JAVA_HOME/bin:$PATH:$CATALINA_HOME/bin
[root@linux ~]# source /etc/profile
[root@linux ~]# java -version 
openjdk version "18" 2022-03-22
OpenJDK Runtime Environment (build 18+36-2087)
OpenJDK 64-Bit Server VM (build 18+36-2087, mixed mode, sharing)
[root@linux ~]# cd tomcat/bin/   #此路径为tomcat解压后主配置文件路径
[root@linux bin]# ./startup.sh   #启动tomcat
[root@linux bin]# ./shutdown.sh  #关闭tomcat

查看端口是否开启

#8005是tomcat默认远程端口 8080是tomcat默认网站
[root@linux bin]# ss -ltunp  

查看默认网站

http://server ip:8080

Https配置

Https证书申请

#生成密钥库
keytool -genkey -alias tomcat -keyalg RSA -keystore /root/skills.jks 
-storepass admin
#查看密钥库信息
keytool -list -v -keystore /root/skills.jks -storepass admin
#生成证书请求文件   
#此处标识参数需与根证书一致
keytool -certreq -file /root/skills.csr -keystore /root/skills.jks -storepass admin -alias tomcat
#查看证书请求文件内容  
keytool -printcertreq -file /root/skills.csr -v
#签发证书
openssl ca -in /root/skills.csr -out /root/skills.crt
#导入证书
#需要将签发好的证书与根证书导入密钥库
#导入根证书
keytool  -importcert -alias tomcat -keystore /root/skills.jks -file /root/cacert.pem
#导入签发的证书
keytool -import -alias tomcat -keystore /root/skills.jks -file /root/skills.crt

Tomcat-配置

[root@linux ~]# vim tomcat/conf/server.xml 
<Connector port="80" protocol="HTTP/1.1"    #默认站点80
           connectionTimeout="20000"
           redirectPort="443" />
<Connector
    protocol="org.apache.coyote.http11.Http11NioProtocol"
    port="443"      #指定端口号
    maxThreads="150"
    SSLEnabled="true">
<SSLHostConfig>
    <Certificate
      certificateKeystoreFile="/root/skills.jks"  #指定密钥库位置  
      certificateKeystorePassword="admin"     #指定密钥库密码
      type="RSA"
      />
    </SSLHostConfig>
</Connector>

关闭selinux

setenforce 0

#主页配置文件存放位置
 /usr/local/tomcat/webapps/ROOT
#主页配置文件
echo "hello"> /usr/local/tomcat/webapps/ROOT/index.html
#防火墙开放端口
firewall-cmd --permanent --add-port=443/tcp
#重新加载防火墙
firewall-cmd --reload
#启动tomcat
/root/tomcat/bin/startup.sh 
#关闭tomcat
/root/tomcat/bin/shutdown.sh 

查看https网站

https://serverip