Nginx+Openssl实现HTTPs（重点）

[root@localhost ~]# rz -E //导入jdk源码包

z waiting to receive.**B0100000023be50

[root@localhost ~]# tar xf jdk-8u191-linux-x64.tar.gz

[root@localhost ~]# ls

anaconda-ks.cfg jdk1.8.0_191 nginx-1.15.9.tar.gz 公共视频文档音乐

initial-setup-ks.cfg jdk-8u191-linux-x64.tar.gz original-ks.cfg 模板图片下载桌面

[root@localhost ~]# mv jdk1.8.0_191/ /usr/local/java

[root@localhost ~]# rz -E //导入apache-tomcat源码包

z waiting to receive.**B0100000023be50

[root@localhost ~]# tar xf apache-tomcat-8.5.40.tar.gz

[root@localhost ~]# mv apache-tomcat-8.5.40 /usr/local/tomcat8

[root@localhost ~]# vim /etc/profile

[root@localhost ~]# source /etc/profile

[root@localhost ~]# java -version

openjdk version "1.8.0_181"

OpenJDK Runtime Environment (build 1.8.0_181-b13)

OpenJDK 64-Bit Server VM (build 25.181-b13, mixed mode)

[root@localhost ~]# rm -rf /usr/bin/java //删除旧版本的java

[root@localhost ~]# source /etc/profile //启动服务

[root@localhost ~]# java -version

java version "1.8.0_191"

Java(TM) SE Runtime Environment (build 1.8.0_191-b12)

Java HotSpot(TM) 64-Bit Server VM (build 25.191-b12, mixed mode)

[root@localhost ~]# /usr/local/tomcat8/bin/startup.sh

Using CATALINA_BASE: /usr/local/tomcat8

Using CATALINA_HOME: /usr/local/tomcat8

Using CATALINA_TMPDIR: /usr/local/tomcat8/temp

Using JRE_HOME: /usr/local/java

Using CLASSPATH: /usr/local/tomcat8/bin/bootstrap.jar:/usr/local/tomcat8/bin/tomcat-juli.jar

Tomcat started.

[root@localhost ~]# netstat -anpt | grep :8080

tcp6 0 0 :::8080 :::* LISTEN 69289/java

[root@localhost ~]#

[root@localhost ~]# keytool -genkeypair -alias tomcat -keyalg RSA -keystore /usr/local/tomcat8/keystore

输入密钥库口令:

再次输入新口令:

您的名字与姓氏是什么?

[Unknown]: liuxiang

您的组织单位名称是什么?

[Unknown]: liuxiang

您的组织名称是什么?

[Unknown]: liuxiang

您所在的城市或区域名称是什么?

[Unknown]: beijing

您所在的省/市/自治区名称是什么?

[Unknown]: haidian

该单位的双字母国家/地区代码是什么?

[Unknown]: CN

CN=liuxiang, OU=liuxiang, O=liuxiang, L=beijing, ST=haidian, C=CN是否正确?

[否]: y

输入 <tomcat> 的密钥口令

(如果和密钥库口令相同, 按回车):

再次输入新口令:

Warning:

JKS 密钥库使用专用格式。建议使用 "keytool -importkeystore -srckeystore /usr/local/tomcat8/keystore -destkeystore /usr/local/tomcat8/keystore -deststoretype pkcs12" 迁移到行业标准格式 PKCS12。

[root@localhost ~]# vim /usr/local/tomcat8/conf/server.xml

修改如下

<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"

maxThreads="150" SSLEnabled="true" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="/usr/local/tomcat8/keystore" keystorePass="123123">

<!--<SSLHostConfig> //注销这一段

<Certificate certificateKeystoreFile="conf/localhost-rsa.jks"

type="RSA" />

</SSLHostConfig>-->

测试：