Article View: cn.bbs.comp.lang.java
Article #241Tomcat������ssl
From: Christopher
Date: Sun, 27 Sep 2009 00:50
Date: Sun, 27 Sep 2009 00:50
41 lines
2799 bytes
2799 bytes
1. ��� server key ��
��command�����������������
keytool -genkey -alias tomcat -keyalg RSA -keypass changeit -storepass changeit
-keystore server.keystore -validity 3600
Ĭ��·���ڡ�C:\Documents and Settings\�û������棩�ŵ�TomcatHOME\��
2.��֤�鵼���JDK��֤�����ο���:
�ⲽ����Tomcat��SSL���ò��DZ��룬������CAS SSO�DZ���ģ������
�������´���edu.yale.its.tp.cas.client.CASAuthenticationException: Unable
to validate ProxyTicketValidator������
�����̷�2������һ���ǵ���֤�飬�ڶ����ǵ��뵽֤�����ο⣬�������£�
keytool -export -trustcacerts -alias tomcat -file server.cer -keystore server.keystore
-storepass changeit
keytool -import -trustcacerts -alias tomcat -file server.cer -keystore %JAVA_HOME%/jre/lib/
security/cacerts -storepass changeit
�������ʾ������Y�Ϳ����ˡ�
��������keytool����г�����֤�������������֤�飬ɾ�����ij��֤�飩��
keytool -list -v -keystore D:/sdks/jdk1.5.0_11/jre/lib/security/cacerts
keytool -delete -trustcacerts -alias tomcat -keystore D:/sdks/jdk1.5.0_11/jre/lib/security/
cacerts -storepass changeit
3.
����TOMCAT server.xml
<Connector port="8443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="server.keystore"
keystorePass="changeit"/>
4. ���ʣ�
https://localhost:8443/
PS:������ۺ�ʵ�������
--
����������
[m[1;31m�� ��Դ:�������ʵBBS bbs.tju.edu.cn��[FROM: 202.113.13.188][m
Technical Details
Message-ID:
<4iB4FZ$9qL@bbs.tju.edu.cn>Path:
arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!proxad.net!feeder1-2.proxad.net!feeder.erje.net!news.byr.edu.cn!TJUShow Full Headers
Complete Article Headers
X-Google-Thread: d1247dbd28,ccce9c9446a84a07,start X-Google-Attributes: gidd1247dbd28,public,usenet X-Google-NewGroupId: yes X-Google-Language: Chinese,GB Path: arc1-ca.pugleaf.net!g2news2.google.com!news3.google.com!proxad.net!feeder1-2.proxad.net!feeder.erje.net!news.byr.edu.cn!TJU From: cffile.bbs@bbs.tju.edu.cn.no.spam (Christopher) Newsgroups: cn.bbs.comp.lang.java Subject: Tomcat������ssl Date: 27 Sep 2009 00:50:59 GMT Organization: �����ʵBBSվ Message-ID: <4iB4FZ$9qL@bbs.tju.edu.cn> Mime-Version: 1.0 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: 8bit X-Filename: Java/M.1254012659.A