在tomcat上配置ssl/tls

Question

我遇到了在tomcat上配置ssl/tls的问题。问题如下:我使用keytool命令导入我的证书，但在配置server.xml时，我得到两个问题:如果我指定keyAlias属性为：

<Connector
           protocol="org.apache.coyote.http11.Http11NioProtocol"
           port="8443" maxThreads="200" keyAlias="tomcat"
           scheme="https" secure="true" SSLEnabled="true"
           keystoreFile="/opt/tomcat/ssl/mykeystorefile.keystore" keystorePass="****"
           clientAuth="false" sslProtocol="TLS"/>

我得到了一个例外：

ConnectorHTTP:无法在org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:113)、org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:107)、org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:875)和org.apache.catalina.util.LifecycleBase.init处初始化组件[ConnectorHTTP/1.1-8443] (org.apache.catalina.startup.Catalina.load(Catalina.java:632) at org.apache.catalina.startup.Catalina.load(Catalina.java:655) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native LifecycleBase.java:107) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at org。在org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:492)的apache.catalina.startup.Bootstrap.load(Bootstrap.java:309)由: org.apache.catalina.LifecycleException: l‘’初始化du gestionnaire de protocole aéchouéat org.apache.catalina.connector.Connector.initInternal(Connector.java:996) at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:107) ... 12更多的原因: java.lang.IllegalArgumentException: Le nom aliastomcat n‘’identifie une entrée de clef at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:116) at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:87) at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:225) at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1086) at org.apache.tomcat.util.net.AbstractJsseEndpoint.init(AbstractJsseEndpoint.org.apache.catalina.connector.Connector.initInternal(Connector.java:993)：268) at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:581) at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:68) at org.apache.catalina.connector.Connector.initInternal(Connector.java:993) ... 13更多原因: org.apache.tomcat.util.net.jsse.JSSEUtil.getKeyManagers(JSSEUtil.java:229)的java.io.IOException: Le nom alias tomcat n‘’identifie une entrée de clef在org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:114) ...还有20多个

当不指定属性时，我会得到相同的异常，使用null而不是tomcat条目。谢谢你的帮忙,

Answer 1

谢谢你的帮助，我确实错过了在jks文件中包含私钥。我遵循了这个教程，它起作用了：https://www.wowza.com/docs/How-to-request-an-SSL-certificate-from-a-certificate-authority