服务器tomcat配置SSL证书(https)

小咪咪 2022-06-14 03:41 231阅读 0赞

1.因开发微信小程序，需要使用到https的域名，所以需要给服务器配置SSL证书。  
证书可以到各大厂商申请，有免费的，有付费的，我在阿里云上申请免费的（Symantec  
免费DV），申请过程就不介绍了，申请完下载证书文件，根据阿里云给出的SSL证书配置进行操作，它还出了配置的视频。。真是太完美了。

视频地址：[https://help.aliyun.com/video\_list/54214.html?spm=5176.7842230.6.562.dpjaWS][https_help.aliyun.com_video_list_54214.html_spm_5176.7842230.6.562.dpjaWS]  
我使用tomcat：[https://help.aliyun.com/video\_detail/54217.html?spm=5176.7854214.2.10.JYv420][https_help.aliyun.com_video_detail_54217.html_spm_5176.7854214.2.10.JYv420]

文字操作贴出来：  
1、PFX证书安装  
找到安装Tomcat目录下该文件server.xml,一般默认路径都是在 conf 文件夹中。  
<Connector port=“8443”  
protocol=“HTTP/1.1”  
SSLEnabled=“true”  
scheme=“https”  
secure=“true”  
keystoreFile=“cert/213953485690408.pfx”  
keystoreType=“PKCS12”  
keystorePass=“证书密码”  
clientAuth=“false”  
ciphers=“TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256”  
SSLProtocol=“TLSv1+TLSv1.1+TLSv1.2”  
SSLCipherSuite=“ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4”/>  
还有苹果ATS问题的描述：[https://help.aliyun.com/knowledge\_detail/48151.html?spm=5176.2020520163.cas.74.MV8UOF][https_help.aliyun.com_knowledge_detail_48151.html_spm_5176.2020520163.cas.74.MV8UOF]

发现按照上面的配置后还是无法打通https。修改如下配置后，顺利通过  
<Connector port=“443” protocol=“org.apache.coyote.http11.Http11Protocol” SSLEnabled=“true”  
maxThreads=“150” scheme=“https” secure=“true”  
clientAuth=“false” sslProtocol=“TLS”  
SSLProtocol=“TLSv1.2”  
SSLCipherSuite=“ECDHE-RSA-AES128-GCM-SHA256:ECDH:AES:HIGH:!aNULL:!MD5:!ADH:!DH”  
keystoreFile=“C:\\ssl\\21312323290408.pfx”  
keystoreType=“PKCS12”  
keystorePass=“21312323290408”  
/>

![这里写图片描述][SouthEast]

[https_help.aliyun.com_video_list_54214.html_spm_5176.7842230.6.562.dpjaWS]: https://help.aliyun.com/video_list/54214.html?spm=5176.7842230.6.562.dpjaWS
[https_help.aliyun.com_video_detail_54217.html_spm_5176.7854214.2.10.JYv420]: https://help.aliyun.com/video_detail/54217.html?spm=5176.7854214.2.10.JYv420
[https_help.aliyun.com_knowledge_detail_48151.html_spm_5176.2020520163.cas.74.MV8UOF]: https://help.aliyun.com/knowledge_detail/48151.html?spm=5176.2020520163.cas.74.MV8UOF
[SouthEast]: /images/20220614/433a63731f9c4e5a8039097c9a5e55a8.png