知識庫
Install Certificate di Tomcat
To install your SSL Certificate, perform the following steps:
1. Import the appropriate root certificates using:
$ keytool -import -trustcacerts -keystore mystore.kdb -alias root - file root.cer
"mystore.kdb" being your keystore.
2. Import the "yourdomain.cer" file using:
keytool -import -trustcacerts -keystore mystore.kdb -alias tomcat -file yourdomain.cer
With "mystore.kdb" being your keystore.
Update server.xml configuration file:
1. Open "$JAKARTA_HOME/conf/server.xml" in a text editor.
2. Find the following section:
- <!--
Define a SSL Coyote HTTP/1.1 Connector on port 8443
-->
Define a SSL Coyote HTTP/1.1 Connector on port 8443
-->
<Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
port="443" minProcessors="5" maxProcessors="75"
enableLookups="true"
acceptCount="100" debug="0" scheme="https" secure="true"
useURIValidationHack="false" disableUploadTimeout="true">
port="443" minProcessors="5" maxProcessors="75"
enableLookups="true"
acceptCount="100" debug="0" scheme="https" secure="true"
useURIValidationHack="false" disableUploadTimeout="true">
<Factory
className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
clientAuth="false"
protocol="TLS"
keystoreFile="mystore.kdb"
keystorePass="YOUR_KEYSTORE_PASSWORD" />
className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
clientAuth="false"
protocol="TLS"
keystoreFile="mystore.kdb"
keystorePass="YOUR_KEYSTORE_PASSWORD" />
</Connector>
3. If you want Tomcat to use the default SSL port, change all instances of the port number "8443" to 443.
4. Start or restart Tomcat
