tomcat8 https 配置

旧城等待， 2023-06-07 15:27 11阅读 0赞

<?xml version="1.0" encoding="UTF-8"?>  
<!--  
  Licensed to the Apache Software Foundation (ASF) under one or more  
  contributor license agreements.  See the NOTICE file distributed with  
  this work for additional information regarding copyright ownership.  
  The ASF licenses this file to You under the Apache License, Version 2.0  
  (the "License"); you may not use this file except in compliance with  
  the License.  You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software  
  distributed under the License is distributed on an "AS IS" BASIS,  
  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.  
  See the License for the specific language governing permissions and  
  limitations under the License.  
\-->  
  
<Server port="8005" shutdown="SHUTDOWN">  
  <Listener className="org.apache.catalina.startup.VersionLoggerListener" />  
    
    
  <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />  
    
  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />  
  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />  
  <Listener className="org.apache.catalina.core.ThreadLocalLeakPreventionListener" />

<GlobalNamingResources>  
      
    <Resource name="UserDatabase" auth="Container"  
              type="org.apache.catalina.UserDatabase"  
              description="User database that can be updated and saved"  
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"  
              pathname="conf/tomcat-users.xml" />  
  </GlobalNamingResources>

<Service name="Catalina">

<Connector port="8082" protocol="HTTP/1.1"  
               connectionTimeout="20000"  
               redirectPort="8443" />  
    <!--  
    <Connector port="443"   
            protocol="HTTP/1.1"  
            SSLEnabled="true"  
            scheme="https"  
            secure="true"  
            keystoreFile="/home/hanshow/apache-tomcat-8.5.20/conf/certificate.pfx"  
            keystoreType="PKCS12"  
            keystorePass="AShd78asdhasASD812ewdasA"  
            clientAuth="false"  
            ciphers="TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256"  
            SSLProtocol="TLSv1+TLSv1.1+TLSv1.2"  
            SSLCipherSuite="ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4"/>

\-->  
      
      
      
      
    <Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol" SSLEnabled="true"  
                enableLookups="false"  
            acceptCount="100" disableUploadTimeout="true"  
            maxThreads="150" scheme="https" secure="true"  
            clientAuth="false" sslProtocol="TLS"  
                keystoreFile="/home/hanshow/apache-tomcat-8.5.20/conf/certificate.pfx"  
            keystoreType="type"  
            keystorePass="password"  
              
            />

<Connector port="8009" protocol="AJP/1.3" redirectPort="8443" />

<Engine name="Catalina" defaultHost="localhost">

<Realm className="org.apache.catalina.realm.LockOutRealm">  
          
        <Realm className="org.apache.catalina.realm.UserDatabaseRealm"  
               resourceName="UserDatabase"/>  
      </Realm>

<Valve className="org.apache.catalina.valves.AccessLogValve" directory="logs"  
               prefix="localhost\_access\_log" suffix=".txt"  
               pattern="%h %l %u %t "%r" %s %b" />

</Host>  
    </Engine>  
  </Service>  
</Server>