tomcat 默认端口说明: <Server port="8005" shutdown="SHUTDOWN"> 远程停服务端口 <Connector port="8080" protocol="HTTP/1.1" connectionTimeout="20000" redirectPort="8443" URIEncoding="UTF-8"/> 其中8080为HTTP端口，8443为默认HTTPS端口 <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" /> 8009为AJP端口,服务器之间的通信使用该端口 HTTP重定向至HTTPS也就是将80端口重定向至443端口
1. 设置https 访问: <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true" maxThreads="150" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="/usr/share/tomcat7/conf/.keystore" keystorePass="sunyainfo.com"/> keystoreFile : 证书存放路径 keystorePass : 证书密码 2. 配置80端口,将8080改成80, redirectPort设置为443 <Connector port="80" protocol="HTTP/1.1" connectionTimeout="20000" URIEncoding="UTF-8" redirectPort="443" />
---------------------------------------配置域名------------------------------------------------------
修改Engine <Engine name="Catalina" defaultHost="localhost">
修改后
<Engine name="Catalina" defaultHost="www.testTomcat.com">
engine指定缺省的处理请求的主机名，它至少与其中的一个host元素的name属性值是一样的
修改域名 <Host name="localhost" appBase="webapps" unpackWARs="true" autoDeploy="true"> 修改后
<Host name="www.testTomcat.com" appBase="webapps" unpackWARs="true" autoDeploy="true">
---------------------------------------配置域名------------------------------------------------------
3. 配置8009端口重定向 <Connector port="8009" protocol="AJP/1.3" redirectPort="443" /> 4. 在 $TOMCAT_HOME/conf/web.xml中加入以下配置,禁止http访问 <security-constraint> <web-resource-collection > <web-resource-name >SSL</web-resource-name> <url-pattern>/*</url-pattern> </web-resource-collection> <user-data-constraint> <transport-guarantee>CONFIDENTIAL</transport-guarantee> </user-data-constraint> </security-constraint> 5.重启tomcat即可