配置Tomcat7的SSL时需要注意两种情况:
一、默认配置,即BIO/NIO模式下启用SSL
<Connector port="8443" protocol="HTTP/1.1
"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
keystorefile="${catalina.base}/conf/xx.jks"
keystorepass="pwd" clientAuth="false" sslProtocol="TLS" />
二、启用APR+SSL
<Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol"
maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
SSLCertificateFile="${catalina.base}/conf/xxx.crt"
SSLCertificateKeyFile="${catalina.base}/conf/xxx.key"
clientAuth="false" sslProtocol="TLS" />
来源:oschina
链接:https://my.oschina.net/u/245971/blog/638299