Step 1: apply for Tomcat type certificate for free, don't understand to baidu, after download decompression can get the following two files


Step 2: transform PFX format of the certificate into JKS format (Tomcat7.0 later version is already supported PFX format of the certificate, specific to baidu)
1. Enter the following JAVA JDK command:
Format:
Keytool importkeystore - srckeystore certificate path + name. PFX - destkeystore deposit certificate path + name. JKS - srcstoretype as PKCS12 - deststoretype JKS
Example: keytool importkeystore - srckeystore c:/yj. PFX - destkeystore c:/yj. JKS - srcstoretype as PKCS12 - deststoretype JKS
2. Press enter after input PFX certificate password, the password file PFX - password. The contents of the TXT,
Step 3: modify the configuration files for server XML, and save,
1. Put the following

To the following


& lt; The Connector port="80" protocol="HTTP/1.1
"ConnectionTimeout="20000"
The redirectPort="443"/& gt;

2. Cancel the following comment module

And modified to the following (note that my certificate in the conf directory of the Tomcat)



Port="443"
Protocol="org. Apache. Coyote. Http11. Http11NioProtocol"
The maxThreads="150"
SSLEnabled="true" & gt;

CertificateKeystoreFile="conf/certificate. JKS"
CertificateKeystorePassword="certificate password"
Type="RSA"/& gt;



Step 4: configure web. XML files, open the HTTP forced jump HTTPS,



Add code label after: - & gt;

CLIENT - CERT
The Client Cert Users - only Area




/* & lt;/url - pattern>


CONFIDENTIAL




Step 5: verify configuration success
1. Restart the tomcat, with access to domain name, appear the following the said certificate
the success of the installation

So where I uploaded to the following configuration, can be downloaded to see

CodePudding user response:

Thanks for sharing,