一、Java命令 生成证书
keytool -genkeypair -alias “tomcat_key” -keyalg “RSA” -storepass “idm123456” -validity 365 -keystore “/app/conan_key.keystore”
二、配置server.xml
注意:须要把org.apache.coyote.http11.Http11AprProtocol改为org.apache.coyote.http11.Http11NioProtoc
解决方法是注释conf\server.xml文件中下面一行。
三、配置 web.xml
<auth-method>CLIENT-CERT</auth-method>
<realm-name>Client Cert Users-only Area</realm-name>
SSL /* CONFIDENTIAL
四、重启tomcat
#!/bin/bash
pid=ps -ef | grep java | grep tomcat8 | awk '{print$2}'
kill -9 $pid &> /dev/null
kill -9 $pid &> /dev/null
sh /app/tomcat8/bin/startup.sh