{"id":58,"date":"2020-02-25T13:49:00","date_gmt":"2020-02-25T13:49:00","guid":{"rendered":"https:\/\/www.wangliguang.cn\/?p=58"},"modified":"2020-02-25T13:49:00","modified_gmt":"2020-02-25T13:49:00","slug":"%e9%98%bf%e9%87%8c%e4%ba%91%e8%bd%bb%e9%87%8f%e5%ba%94%e7%94%a8%e6%9c%8d%e5%8a%a1%e5%99%a8-%e9%98%bf%e9%87%8c%e4%ba%91ecs-centos%e7%b3%bb%e7%bb%9ftomcat-8-5%e5%a6%82%e4%bd%95%e9%83%a8%e7%bd%b2ssl","status":"publish","type":"post","link":"https:\/\/wangliguang.cn\/?p=58","title":{"rendered":"\u963f\u91cc\u4e91\u8f7b\u91cf\u5e94\u7528\u670d\u52a1\u5668-\u963f\u91cc\u4e91ECS-CentOS\u7cfb\u7edfTomcat 8.5\u5982\u4f55\u90e8\u7f72SSL\u8bc1\u4e66"},"content":{"rendered":"<p>\u64cd\u4f5c\u6b65\u9aa4<br \/>\n1\u3001\u89e3\u538bTomcat\u8bc1\u4e66\u3002<br \/>\n\u5728Tomcat\u5b89\u88c5\u76ee\u5f55\u4e0b\u65b0\u5efacert\u76ee\u5f55\uff0c\u5c06\u4e0b\u8f7d\u7684\u8bc1\u4e66\u548c\u5bc6\u7801\u6587\u4ef6\u62f7\u8d1d\u5230cert\u76ee\u5f55\u4e0b\u3002<br \/>\n2\u3001\u6253\u5f00Tomcat\/conf\/server.xml\uff0c\u5728server.xml\u6587\u4ef6\u4e2d\u627e\u5230\u4ee5\u4e0b\u53c2\u6570\u5e76\u8fdb\u884c\u4fee\u6539\u3002<\/p>\n<pre><code><connector port=\"8080\" protocol=\"HTTP\/1.1\"\n               connectionTimeout=\"20000\"\n               redirectPort=\"8443\" \/>\n #\u627e\u5230\u4ee5\u4e0a\u53c2\u6570\uff0c\u53bb\u6389<!- - \u548c - ->\u8fd9\u5bf9\u6ce8\u91ca\u7b26\u5e76\u4fee\u6539\u4e3a\u5982\u4e0b\u53c2\u6570\uff0c\u5bf9HTTPS\u9ed8\u8ba4\u7aef\u53e3\u8fdb\u884c\u914d\u7f6e\uff1a\n <connector port=\"80\" protocol=\"HTTP\/1.1\"   #\u5c06Connector port\u4fee\u6539\u4e3a80\u3002\n               connectionTimeout=\"20000\"\n               redirectPort=\"443\" \/>    #\u5c06redirectPort\u4fee\u6539\u4e3aSSL\u9ed8\u8ba4\u7aef\u53e3443\uff0c\u8ba9HTTPS\u8bf7\u6c42\u8f6c\u53d1\u5230443\u7aef\u53e3\u3002\n<\/code><\/pre>\n<pre><code><connector port=\"8443\"\n      protocol=\"org.apache.coyote.http11.Http11NioProtocol\"\n      maxThreads=\"150\"\n      SSLEnabled=\"true\">\n    <sslhostConfig>\n        <certificate       certificateKeystoreFile=\"cert\/keystore.pfx\"\n         certificateKeystorePassword=\"XXXXXXX\"\n                     certificateKeystoreType=\"PKCS12\" \/>\n#\u627e\u5230\u4ee5\u4e0a\u53c2\u6570\uff0c\u53bb\u6389<!- - \u548c - ->\u8fd9\u5bf9\u6ce8\u91ca\u7b26\u5e76\u4fee\u6539\u4e3a\u5982\u4e0b\u53c2\u6570\uff1a\n<connector port=\"443\"   #\u5c06Tomcat\u4e2d\u9ed8\u8ba4\u7684HTTPS\u7aef\u53e3Connector port 8443\u4fee\u6539\u4e3a443\u30028443\u7aef\u53e3\u4e0d\u53ef\u901a\u8fc7\u57df\u540d\u76f4\u63a5\u8bbf\u95ee\u3001\u9700\u8981\u5728\u57df\u540d\u540e\u52a0\u4e0a\u7aef\u53e3\u53f7\uff1b443\u7aef\u53e3\u662fHTTPS\u7684\u9ed8\u8ba4\u7aef\u53e3\uff0c\u53ef\u901a\u8fc7\u57df\u540d\u76f4\u63a5\u8bbf\u95ee\uff0c\u65e0\u9700\u5728\u57df\u540d\u540e\u52a0\u7aef\u53e3\u53f7\u3002\n      protocol=\"org.apache.coyote.http11.Http11NioProtocol\"   #server.xml\u6587\u4ef6\u4e2dConnector port\u6709\u4e24\u79cd\u8fd0\u884c\u6a21\u5f0f\uff08NIO\u548cAPR\uff09\uff0c\u8bf7\u9009\u62e9NIO\u6a21\u5f0f\uff08\u4e5f\u5c31\u662fprotocol=\"org.apache.coyote.http11.Http11NioProtocol\"\uff09\u8fd9\u4e00\u6bb5\u8fdb\u884c\u914d\u7f6e\u3002\n      maxThreads=\"150\"\n      SSLEnabled=\"true\">\n    <sslhostConfig>\n        <certificate       certificateKeystoreFile=\"\/usr\/local\/tomcat\/cert\/\u8bc1\u4e66\u57df\u540d.pfx\"   #\u6b64\u5904certificateKeystoreFile\u4ee3\u8868\u8bc1\u4e66\u6587\u4ef6\u7684\u8def\u5f84\uff0c\u8bf7\u7528\u60a8\u8bc1\u4e66\u7684\u8def\u5f84+\u6587\u4ef6\u540d\u66ff\u6362\u8bc1\u4e66\u57df\u540d.pfx\uff0c\u4f8b\u5982\uff1acertificateKeystoreFile=\"\/usr\/local\/tomcat\/cert\/abc.com.pfx\"\n         certificateKeystorePassword=\"\u8bc1\u4e66\u5bc6\u7801\"   #\u6b64\u5904certificateKeystorePassword\u4e3aSSL\u8bc1\u4e66\u7684\u5bc6\u7801\uff0c\u8bf7\u7528\u60a8\u8bc1\u4e66\u5bc6\u7801\u6587\u4ef6pfx-password.txt\u4e2d\u7684\u5bc6\u7801\u66ff\u6362\uff0c\u4f8b\u5982\uff1acertificateKeystorePassword=\"bMNML1Df\"\n         certificateKeystoreType=\"PKCS12\" \/>   #\u8bc1\u4e66\u7c7b\u578b\u4e3aPFX\u683c\u5f0f\u65f6\uff0ccertificateKeystoreType\u4fee\u6539\u4e3aPKCS12\u3002\n    <\/sslhostConfig>\n<\/connector>\n<\/code><\/pre>\n<p>3\u3001\u4fdd\u5b58server.xml\u6587\u4ef6\u914d\u7f6e\u3002<br \/>\n4\u3001\uff08\u53ef\u9009\u6b65\u9aa4\uff09\u5728web.xml\u6587\u4ef6\u6700\u5e95\u90e8\u6dfb\u52a0\u4ee5\u4e0b\u5185\u5bb9\uff0c\u5b9e\u73b0HTTP\u81ea\u52a8\u8df3\u8f6c\u4e3aHTTPS\u3002<\/p>\n<pre><code><security-constraint>\n         <web-resource-collection >\n              <web-resource-name >SSL<\/web-resource-name>\n              <url-pattern>\/*<\/url-pattern>\n       <\/web-resource-collection>\n       <user-data-constraint>\n                    <transport-guarantee>CONFIDENTIAL<\/transport-guarantee>\n       <\/user-data-constraint>\n    <\/security-constraint>\n<\/code><\/pre>\n<p>5\u3001\u91cd\u542fTomcat\u670d\u52a1\u3002<br \/>\n\u5728Tomcat\u4e0b\u7684bin\u76ee\u5f55\u4e2d\u6267\u884c.\/shutdown.sh\u5173\u95edTomcat\u670d\u52a1\u3002\u5173\u95edTomcat\u670d\u52a1<br \/>\n\u5728Tomcat\u4e0b\u7684bin\u76ee\u5f55\u4e2d\u6267\u884c.\/startup.sh\u5f00\u542fTomcat\u670d\u52a1\u3002\u5f00\u542fTomcat\u670d\u52a1<br \/>\n\u540e\u7eed\u64cd\u4f5c<br \/>\nTomcat\u670d\u52a1\u91cd\u542f\u6210\u529f\u540e\uff0c\u53ef\u5728\u6d4f\u89c8\u5668\u4e2d\u8f93\u5165\u60a8SSL\u8bc1\u4e66\u7ed1\u5b9a\u7684\u57df\u540dhttps:\/\/www.YourDomainName.com\u9a8c\u8bc1\u8bc1\u4e66\u5b89\u88c5\u7ed3\u679c\u3002\u6d4f\u89c8\u5668\u5730\u5740\u680f\u663e\u793a\u7eff\u8272\u7684\u5c0f\u9501\u6807\u8bc6\u8bf4\u660e\u8bc1\u4e66\u5b89\u88c5\u6210\u529f\u3002<br \/>\n\u53c2\u8003\u6587\u732e\uff1ahttps:\/\/help.aliyun.com\/document_detail\/102939.html?spm=a2c4g.11186623.2.15.127c4b20RFH8Dp#concept-i2b-cdb-mgb<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u64cd\u4f5c\u6b65\u9aa4 1\u3001\u89e3\u538bTomcat\u8bc1\u4e66\u3002 \u5728Tomcat\u5b89\u88c5\u76ee\u5f55\u4e0b\u65b0\u5efacert\u76ee\u5f55\uff0c\u5c06\u4e0b\u8f7d\u7684\u8bc1\u4e66\u548c\u5bc6\u7801\u6587\u4ef6\u62f7\u8d1d\u5230c&hellip; <a href=\"https:\/\/wangliguang.cn\/?p=58\" class=\"more-link\">\u7ee7\u7eed\u9605\u8bfb <span class=\"screen-reader-text\">\u963f\u91cc\u4e91\u8f7b\u91cf\u5e94\u7528\u670d\u52a1\u5668-\u963f\u91cc\u4e91ECS-CentOS\u7cfb\u7edfTomcat 8.5\u5982\u4f55\u90e8\u7f72SSL\u8bc1\u4e66<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14,24],"tags":[36,45],"class_list":["post-58","post","type-post","status-publish","format-standard","hentry","category-14","category-24","tag-36","tag-45"],"_links":{"self":[{"href":"https:\/\/wangliguang.cn\/index.php?rest_route=\/wp\/v2\/posts\/58","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wangliguang.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wangliguang.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wangliguang.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wangliguang.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=58"}],"version-history":[{"count":0,"href":"https:\/\/wangliguang.cn\/index.php?rest_route=\/wp\/v2\/posts\/58\/revisions"}],"wp:attachment":[{"href":"https:\/\/wangliguang.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=58"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wangliguang.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=58"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wangliguang.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=58"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}