Create HTTPS Apache Tomcat

on


 

Apache Tomcat v7.0.109 (in Linux Debian)

Create directory 

$ mkdir -p .keystore

Create private key .jks file

$ keytool -genkeypair -alias alias_myapp -keyalg RSA -keysize 2048 -keystore .keystore/keystore_myapp.jks -validity 3650

Note :   keytool is inside /opt/jvm/jdk-7/bin

In your apache tomcat root path, edit conf/server.xml

Paste these config :

<Connector port="8001" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443"
               address="0.0.0.0" useIPVHosts="true"
               scheme="https" secure="true" SSLEnabled="true"
               clientAuth="false" sslProtocol="TLS"
               keystoreFile="/home/usrdebian/.keystore/keystore_myapp.jks" keystorePass="YourPassword" />

Test :   https://dev.example.com:8001/myapp

 

Apache Tomcat v9.0.98 (in Windows Server 2025)

Open cmd run as Administrator.

$ cd C:\Users\usrwinos

Create directory 

$ mkdir .keystore

Create private key .jks file

$ keytool -genkeypair -alias alias_myapp -keyalg RSA -keysize 2048 -keystore .keystore/keystore_myapp.jks -validity 3650

Note :   keytool is inside C:\Program Files\Java\jdk1.7.0_80\bin

In your apache tomcat root path, edit conf/server.xml

Paste these config :

<Connector port="9080" relaxedPathChars="[]|" relaxedQueryChars="[]|{}^&#x5c;&#x60;&quot;&lt;&gt;"
                   maxThreads="150" minSpareThreads="25" connectionTimeout="20000" enableLookups="false"
                   maxHttpHeaderSize="8192" protocol="HTTP/1.1" useBodyEncodingForURI="true" redirectPort="8443"
                   acceptCount="100" disableUploadTimeout="true" bindOnInit="false"
                   scheme="https" secure="true" SSLEnabled="true"
                   SSLCertificateFile="C:/Certbot/live/dev.example.com/fullchain.pem"
                   SSLCertificateKeyFile="C:/Certbot/live/dev.example.com/privkey.pem"
                   SSLVerifyClient="optional" SSLProtocol="TLSv1+TLSv1.1+TLSv1.2"
                   />

Test :   https://dev.example.com:9080/myapp

Comments

Post a Comment