Linux下TOMCAT SSL支持设置

Tomcat SSL 配置配置 文档内所有命令依据系统环境为 JAVA jdk1 6 0 30 System CentOS release 5 7 Tomcat apache tomcat 6 0 26 KeyTool jdk 自带 生成认证文件 生成认证文件 1 生成 server key keytool genkey alias nsp keyalg RSA validity 3650 keystore opt apache tomcat 6 0 26 keystore nsp keystore Enter keystore password 输入密码 Re enter new password 输入确认密码 What is your first and last name Unknown your name 输入用户 What is the name of your organizational unit Unknown 不输入 直接回车 What is the name of your organization Unknown your organization 输入组织名 What is the name of your City or Locality Unknown fs 输入城市 What is the name of your State or Province Unknown gd 输入省份 What is the two letter country code for this unit Unknown 不输入 直接回车 Is CN jeff OU jeff O nsp L fs ST gd C 123 correct no y Enter key password for RETURN if same as keystore password Re enter new password 生成 pl2 文件 keytool genkey v alias nsp keyalg RSA storetype PKCS12 keystore opt apache tomcat 6 0 26 keystore nsp pl2 dname CN admin OU nsp O nsp L foshan ST gd C cn storepass cdcgs123 keypass cdcgs123 Generating 1 024 bit RSA key pair and self signed certificate SHA1withRSA with a validity of 90 days for CN admin OU nsp O nsp L foshan ST gd C cn Storing opt apache tomcat 6 0 26 keystore2 nsp pl2 导入过程分 2 步 第一步是导出证书 第二步是导入到证书信任库 命令如下 keytool export alias nsp keystore opt apache tomcat 6 0 26 keystore nsp pl2 storetype PKCS12 storepass cdcgs123 rfc file opt apache tomcat 6 0 26 keystore nsp cer Generating 1 024 bit RSA key pair and self signed certificate SHA1withRSA with a validity of 90 days for CN admin OU nsp O nsp L foshan ST gd C cn Storing opt apache tomcat 6 0 26 keystore2 nsp pl2 keytool import v file opt apache tomcat 6 0 26 keystore nsp cer keystore opt apache tomcat 6 0 26 keystore nsp keystore storepass cdcgs123 2 2 设置设置 TOMCATTOMCAT 使其增加使其增加 SSLSSL 支持 修改支持 修改 service xmlservice xml 文件文件 3 3 如果要对单独工程的强制安全访问 对相应工程的如果要对单独工程的强制安全访问 对相应工程的 web xmlweb xml 文件加入如下代码 文件加入如下代码 CLIENT CERT Client Cert U