Friday, December 12, 2008

How to setup tomcat SSL server and client

  1. Create a certificate keystore by executing the following command:

    Windows:

    %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA

    Unix:

    $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA
    and specify a password value of "changeit". the keystore file is named as .keystore located in the user's home directory.

  2. Uncomment the "SSL HTTP/1.1 Connector" entry in $CATALINA_BASE/conf/server.xml and tweak as necessary
  3. ---------------------------------------------------------------------------------- maxThreads="150" scheme="https" secure="true"
    clientAuth="false" sslProtocol="TLS" />

No comments: