tomcat 配置https

tomcat 配置https 可参见,tomcat启动后的demo项目的document目录中的ssl/TLS配置

按步骤生成证书即可

只需要配置
<Connector
           protocol="org.apache.coyote.http11.Http11NioProtocol"
           port="8443" maxThreads="200"
           scheme="https" secure="true" SSLEnabled="true"
           keystoreFile="${user.home}/.keystore" keystorePass="changeit"
           clientAuth="false" sslProtocol="TLS"/>

然后将keystoreFile 文件地址,keystorePass 密码修改成你配置的

tomcat 配置强制跳转https
在tomcat\conf\web.xml中的</welcome-file-list>后面加上这样一段：
<login-config>  
    <!-- Authorization setting for SSL -->  
   <auth-method>CLIENT-CERT</auth-method>  
    <realm-name>Client Cert Users-onlyArea</realm-name>  
</login-config>  
<security-constraint>  
    <!-- Authorization setting for SSL -->  
    <web-resource-collection >  
        <web-resource-name>SSL</web-resource-name>  
       <url-pattern>/*</url-pattern>  
    </web-resource-collection>  
    <user-data-constraint>  
       <transport-guarantee>CONFIDENTIAL</transport-guarantee>  
    </user-data-constraint>