...
Code Block |
---|
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false"> <SSLHostConfig sslProtocol="TLS" keystoreFile > <Certificate certificateKeystoreFile="conf/.keystore" keystorePasscertificateKeyAlias="$ALIAS" certificateKeystorePassword="$PASSWORD" keyAlias="$ALIAS"/>/> <Cipher ciphers="TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"/> </SSLHostConfig> </Connector> |
Copy the keystore.jks file described in Keystore Generation and Certificates to the tomcat/conf
directory and rename the file .keystore
. $PASSWORD
is the user password specified when the keystore was created. $ALIAS
is the alias assigned to the desired certificate in the keystore.
...