Tomcat自动重定向https笔记

Posted 2020-08-21

此博客不探讨Nginx、Apache或者其它代理实现https形式访问，只探讨tomcat自动重定向https。

---

1、证书请求，颁发，导入，生成：此步骤根据官方手册即可

一般是jks和keystore两种格式

2、server.xml配置

<!-- Connector definition for TCP port 80 -->

<Connector port="80"

           maxHttpHeaderSize="8192"

           maxThreads="150"

           useBodyEncodingForURI="true"

           enableLookups="false"

           acceptCount="100"

           connectionTimeout="20000"

           disableUploadTimeout="true"

           compression="on"

           compressionMinSize="2048"

           noCompressionUserAgents="gozilla, traviata"

           compressableMimeType="text/html,text/xml"/>

 

<!-- Connector definition for SSL port 443 -->

 

<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"

               maxThreads="150" scheme="https" secure="true"

               clientAuth="false" sslProtocol="TLS" keystoreFile="/tomcat.keystore" keystorePass="123456789"/>

3、配置web.xml文件

<login-config>  
    <!-- Authorization setting for SSL -->  
    <auth-method>CLIENT-CERT</auth-method>  
    <realm-name>Client Cert Users-only Area</realm-name>  
</login-config>  
<security-constraint>  
    <!-- Authorization setting for SSL -->  
    <web-resource-collection >  
        <web-resource-name >SSL</web-resource-name>  
        <url-pattern>/*</url-pattern>  
    </web-resource-collection>  
    <user-data-constraint>  
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>  
    </user-data-constraint>  
</security-constraint>

4、重启服务

1、rm  -rf work/*

2、service tomcat restart

本文出自 “任志远51CTO博客” 博客，请务必保留此出处http://renzhiyuan.blog.51cto.com/10433137/1878511