tomcat8 配置https(续)

tomcat8 配置http重定向到https,记录一下

网上找了一些文章&＃xff0c;有的说不可以&＃xff0c;需要用一些插件。然而google了一下&＃xff0c;确实是可以的。


---

修改server.xml , 默认8080改成80&＃xff0c;redirectPort改成443,AJP的redirectPort也修改一下

<Connector port&＃61;"80" protocol&＃61;"HTTP/1.1"connectionTimeout&＃61;"20000"redirectPort&＃61;"443" />
<Connector port&＃61;"443" protocol&＃61;"org.apache.coyote.http11.Http11NioProtocol"maxThreads&＃61;"150" SSLEnabled&＃61;"true" scheme&＃61;"https" secure&＃61;"true"keystoreFile&＃61;"tomcat.keystore"keystorePass&＃61;"123456"clientAuth&＃61;"false" sslProtocol&＃61;"TLS" />

<Connector port&＃61;"8009" protocol&＃61;"AJP/1.3" redirectPort&＃61;"443" />

修改conf/web.xml,在welcome-file-list 后面加入以下内容

<security-constraint> <web-resource-collection > <web-resource-name >SSLweb-resource-name> <url-pattern>/*url-pattern> web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIALtransport-guarantee> user-data-constraint> security-constraint>

参考

https://tomcat.apache.org/tomcat-8.0-doc/config/http.html

http://www.itworld.com/article/2769041/development/how-to-configure-tomcat-to-always-require-https.html

https://coolestguidesontheplanet.com/redirecting-http-https-tomcat/

http://blog.csdn.net/chow__zh/article/details/8843594