CentOS6 Tomcat6 SSL Settings

1. 產生憑證

keytool -genkey -alias tomcat -keyalg RSA

2. 複製憑證(.keystore)到

/usr/share/tomcat6

3. 修改 /etc/tomcat6/server.xml

                   maxThreads="150" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS"
               keystoreFile="${user.home}/.keystore" keystorePass="changeit"
    





4. 如果要把 8443 改到 443

用port redirect 作法
修改 /etc/sysconfig/iptables

在*filter 前面
加上 NAT的部份


#NAT部份
#把  443 轉到 tomcat ssl 8443
*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]

-A PREROUTING -i eth1 -p tcp --dport 443 -j DNAT --to-destination :8443
-A PREROUTING -i eth1 -p tcp --dport 80 -j DNAT --to-destination :8080

-I OUTPUT -p tcp -d 127.0.0.1 --dport 443 -j REDIRECT --to-ports 8080

COMMIT