All Documents
Current Document

Recommend

Container Engine Virtual Private Cloud Standard Storage Service

Found 0 result in total

Content is empty

If you don't find the content you expect, please try another search term

Documentation

Certificate Management (KCM)

View more results
Document title with current keyword not found
Directory
Expand AllFold All Up
No products found with this keyword
Documentation Certificate Management (KCM) User Guide Certificate configuration Tomcat

Tomcat

Last updated：2024-03-15 16:28:22

Download the certificate file

Download the certificate package from the KCM console and decompress the package to obtain the .jks file.

Install the .jks certificate

  1. Copy the keystore.jks file to the conf folder in the Tomcat installation directory.

  2. Open the server.xml file in the conf folder.

  3. Locate the following lines:

    <Connector port="8080" protocol="HTTP/1.1"
             connectionTimeout="20000"
             redirectPort="8443" />

  4. Use the following lines to replace the previously mentioned lines:

    <Connector port="8080" protocol="HTTP/1.1"
             connectionTimeout="20000"
             redirectPort="443" />

<!—
         <Connector protocol="org.apache.coyote.http11.Http11Protocol"
             port="8443" SSLEnabled="true"
             maxThreads="150" scheme="https" secure="true"
             clientAuth="false" sslProtocol="TLS" />
  -->

  5. Use the following lines to replace the previously mentioned lines:

  <Connector protocol="org.apache.coyote.http11.Http11Protocol"
                    port="443" SSLEnabled="true"
                     maxThreads="150" scheme="https" secure="true"
                 keystoreFile="conf\keystore.jks" keystorePass="JKS file password"
                 clientAuth="false" sslProtocol="TLS"
  ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA256"/>

By default, the SSL listening port is port 443. If you use a different port, access your website by using a URL in the https://yourdomain:port format.

Access test

Restart Tomcat. Access your website by using https://yourdomain:port and verify that the certificate has been installed correctly.

On this page
Previous:NGINX
Next:IIS6
Pure ModeNormal Mode

Pure Mode

Click to preview the document content in full screen
Feedback