keytool生成jks证书以及tomcat配置jks证书

利用jdk自带工具keytool生成自签名证书

keytool -genkey -v -alias serverCert-keyalg RSA -keysize 2048 -keypass 111111 -dname "cn=xxx,ou=xxx,o=xxx,st=xxx,c=cn" -keystore /home/test.private.jks -storepass 111111 -validity 3650

在conf下server.xml中配置如下

<Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" keystoreFile="/xxx/xxx.jks"  keystorePass="xxxx" keyAlias="xxxx"/>