{"id":124,"date":"2021-01-13T12:05:21","date_gmt":"2021-01-13T04:05:21","guid":{"rendered":"https:\/\/www.ssle.cn\/help\/?p=124"},"modified":"2022-01-13T12:51:10","modified_gmt":"2022-01-13T04:51:10","slug":"tomcat-an-zhuang-ssl-zheng-shu","status":"publish","type":"post","link":"https:\/\/ssle.cn\/help\/tomcat-an-zhuang-ssl-zheng-shu\/","title":{"rendered":"Tomcat \u5b89\u88c5SSL\u8bc1\u4e66"},"content":{"rendered":"<p>\u8bf7\u6ce8\u610f\uff1a \u5982\u679c\u6536\u5230\u7684\u662fjks\u6587\u4ef6\u8bf7\u8df3\u8fc7\u7b2c\u4e00\u6b65\u3002<\/p>\n<p><strong>1. \u5bfc\u5165p7b\u683c\u5f0f\u5230keystore\u6587\u4ef6 \u00a0<\/strong><\/p>\n<pre class=\"  language-powershell\"><code class=\"  language-powershell\">C:\\Users\\suppo\\tomcat&gt;keytool <span class=\"token operator\">-<\/span>import <span class=\"token operator\">-<\/span>trustcacerts <span class=\"token operator\">-<\/span>alias getssl <span class=\"token operator\">-<\/span>file demo<span class=\"token punctuation\">.<\/span>ssle<span class=\"token punctuation\">.<\/span>cn<span class=\"token punctuation\">.<\/span>p7b <span class=\"token operator\">-<\/span>keystore ssle<span class=\"token punctuation\">.<\/span>jks\r\n\u8f93\u5165keystore\u5bc6\u7801\uff1a<\/code><\/pre>\n<p>\u8f93\u5165\u751f\u6210jks\u65f6\u7684\u5bc6\u7801\uff0c\u5373\u53ef\u5bfc\u5165\u6210\u529f\u3002\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u67e5\u8be2\u521a\u521a\u5bfc\u5165\u7684\u8bc1\u4e66<\/p>\n<pre class=\"  language-powershell\"><code class=\"  language-powershell\">C:\\Users\\suppo\\tomcat&gt;keytool <span class=\"token operator\">-<\/span>list <span class=\"token operator\">-<\/span>keystore ssle<span class=\"token punctuation\">.<\/span>jks <span class=\"token operator\">-<\/span>v\r\n\u8f93\u5165keystore\u5bc6\u7801\uff1a\r\n\r\nKeystore \u7c7b\u578b\uff1a JKS\r\nKeystore \u63d0\u4f9b\u8005\uff1a SUN\r\n\r\n\u60a8\u7684 keystore \u5305\u542b 1 \u8f93\u5165\r\n\r\n\u522b\u540d\u540d\u79f0\uff1a ssle\r\n\u521b\u5efa\u65e5\u671f\uff1a 2021<span class=\"token operator\">-<\/span>8<span class=\"token operator\">-<\/span>20\r\n\u9879\u7c7b\u578b: PrivateKeyEntry\r\n\u8ba4\u8bc1\u94fe\u957f\u5ea6\uff1a 2\r\n\u8ba4\u8bc1 <span class=\"token punctuation\">[<\/span>1<span class=\"token punctuation\">]<\/span>:\r\n\u6240\u6709\u8005:CN=demo<span class=\"token punctuation\">.<\/span>getssl<span class=\"token punctuation\">.<\/span>cn<span class=\"token punctuation\">,<\/span> OU=SSLE<span class=\"token punctuation\">,<\/span> O=IT DEPT<span class=\"token punctuation\">,<\/span> L=SHANGHAI<span class=\"token punctuation\">,<\/span> ST=SHANGHAI<span class=\"token punctuation\">,<\/span> C=CN<\/code><\/pre>\n<p><strong>2 . \u5b89\u88c5\u8bc1\u4e66<\/strong><\/p>\n<p>\u5c06jks\u6587\u4ef6\u653e\u5230tomcat\u5b89\u88c5\u76ee\u5f55\u3002<\/p>\n<p>\u4f7f\u7528\u7f16\u8f91\u5668\u6216\u8005vi \u6253\u5f00 \u00a0<kbd>tomcat\u5b89\u88c5\u76ee\u5f55\/conf\/server.xml<\/kbd>\u00a0\u00a0,\u6dfb\u52a0\u4e00\u4e2a\u00a0Connector<\/p>\n<pre class=\"  language-xml\"><code class=\"  language-xml\"><span class=\"token tag\"><span class=\"token punctuation\">&lt;<\/span>Connector <span class=\"token attr-name\">port<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>443<span class=\"token punctuation\">\"<\/span><\/span> <span class=\"token attr-name\">protocol<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>org.apache.coyote.http11.Http11NioProtocol<span class=\"token punctuation\">\"<\/span><\/span>\r\n\t\t\t<span class=\"token attr-name\">SSLEnabled<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>true<span class=\"token punctuation\">\"<\/span><\/span> <span class=\"token attr-name\">maxThreads<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>150<span class=\"token punctuation\">\"<\/span><\/span> <span class=\"token attr-name\">scheme<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>https<span class=\"token punctuation\">\"<\/span><\/span> <span class=\"token attr-name\">secure<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>true<span class=\"token punctuation\">\"<\/span><\/span>\r\n               <span class=\"token attr-name\">clientAuth<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>false<span class=\"token punctuation\">\"<\/span><\/span> <span class=\"token attr-name\">keystoreFile<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>getssl.jks<span class=\"token punctuation\">\"<\/span><\/span> <span class=\"token attr-name\">keystorePass<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>123456<span class=\"token punctuation\">\"<\/span><\/span> <span class=\"token attr-name\">keyAlias<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>getssl<span class=\"token punctuation\">\"<\/span><\/span> <span class=\"token attr-name\">sslProtocol<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>TLSv1.2<span class=\"token punctuation\">\"<\/span><\/span>\r\n              <span class=\"token attr-name\">sslEnabledProtocols<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>TLSv1.2,TLSv1.1,TLSv1<span class=\"token punctuation\">\"<\/span><\/span>\r\n              <span class=\"token attr-name\">ciphers<\/span><span class=\"token attr-value\"><span class=\"token punctuation\">=<\/span><span class=\"token punctuation\">\"<\/span>TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,\r\n                       TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,\r\n                       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,\r\n                       TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,\r\n                       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,\r\n                       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,\r\n                       TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,\r\n                       TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,\r\n                       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,\r\n                       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,\r\n                       TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,\r\n                       TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA<span class=\"token punctuation\">\"<\/span><\/span>\r\n <span class=\"token punctuation\">\/&gt;<\/span><\/span><\/code><\/pre>\n<ul>\n<li><strong>keystoreFile<\/strong>\u00a0\u00a0jks\u6587\u4ef6\u540d<\/li>\n<li><strong>keystorePass<\/strong>\u00a0\u00a0jks\u6587\u4ef6\u5bc6\u7801<\/li>\n<li><strong>keyAlias<\/strong>\u00a0\u00a0\u751f\u6210csr\u65f6\u8bbe\u7f6e\u7684\u522b\u540d\uff0c \u4ece\u6211\u4eec\u7f51\u7ad9\u4e0b\u8f7dJKS\u6587\u4ef6\u7684\u7528\u6237\u9ed8\u8ba4\u4e3a\u00a0<kbd>1<\/kbd>\uff0ckeyAlias=&#8221;1&#8243;<\/li>\n<\/ul>\n<p>\u5b89\u88c5\u540e\u91cd\u542ftomcat<\/p>\n<pre class=\" -none  language-language\"><code class=\"-none  language-language\">shutdown.sh \/ shutdown.bat\r\nstartup.sh \/ startup.bat<\/code><\/pre>\n<p><strong>\u76f8\u5173\u6587\u7ae0<\/strong><\/p>\n<ol>\n<li><a href=\"https:\/\/www.getssl.cn\/docs\/csr-creation-tomcat.html\" target=\"_blank\" rel=\"noopener\">Tomcat \u751f\u6210CSR<\/a><\/li>\n<li><a href=\"https:\/\/tomcat.apache.org\/tomcat-7.0-doc\/ssl-howto.html\" target=\"_blank\" rel=\"noopener\">Tomcat\u5b98\u65b9\u6587\u6863 7.0<\/a><\/li>\n<li><a href=\"https:\/\/tomcat.apache.org\/tomcat-6.0-doc\/ssl-howto.html\" target=\"_blank\" rel=\"noopener\">Tomcat\u5b98\u65b9\u6587\u68636.0<\/a><\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>\u8bf7\u6ce8\u610f\uff1a \u5982\u679c\u6536\u5230\u7684\u662fjks\u6587\u4ef6\u8bf7\u8df3\u8fc7\u7b2c\u4e00\u6b65\u3002 1. \u5bfc\u5165p7b\u683c\u5f0f\u5230keystore\u6587\u4ef6 \u00a0 C:\\Users\\suppo\\tomcat&gt;keytool -import -trustcacerts -alias getssl -file demo.ssle.cn.p7b -keystore ssle.jks \u8f93\u5165ke &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[],"class_list":["post-124","post","type-post","status-publish","format-standard","hentry","category-ssl-install"],"_links":{"self":[{"href":"https:\/\/ssle.cn\/help\/wp-json\/wp\/v2\/posts\/124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ssle.cn\/help\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ssle.cn\/help\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ssle.cn\/help\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ssle.cn\/help\/wp-json\/wp\/v2\/comments?post=124"}],"version-history":[{"count":0,"href":"https:\/\/ssle.cn\/help\/wp-json\/wp\/v2\/posts\/124\/revisions"}],"wp:attachment":[{"href":"https:\/\/ssle.cn\/help\/wp-json\/wp\/v2\/media?parent=124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ssle.cn\/help\/wp-json\/wp\/v2\/categories?post=124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ssle.cn\/help\/wp-json\/wp\/v2\/tags?post=124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}