Tomcat的SSL配置

Question

你先保证你的证书正确.
还有  keystoreFile="%TCAT_HOME%/conf/server_keystore" //建议这样设置,不建议用绝地路径
的设置能够访问到keystore内的证书.

Answer 1

还是提示
keystoreFile="%TCAT_HOME%/conf/                   的路径问题
郁闷

Answer 2

错误信息
C:\Program Files\Apache Group\Tomcat 4.1\bin>catalina.bat run
Using CATALINA_BASE:   ..
Using CATALINA_HOME:   ..
Using CATALINA_TMPDIR: ..\temp
Using JAVA_HOME:       C:\j2sdk1.4.2\
Using TOMCAT_HOME:              C:\Program Files\Apache Group\Tomcat 4.1\
2003-9-26 8:22:47 org.apache.commons.modeler.Registry loadRegistry
信息: Loading registry information
2003-9-26 8:22:48 org.apache.commons.modeler.Registry getRegistry
信息: Creating new Registry instance
2003-9-26 8:22:48 org.apache.commons.modeler.Registry getServer
信息: Creating MBeanServer
2003-9-26 8:22:49 org.apache.coyote.http11.Http11Protocol init
信息: Initializing Coyote HTTP/1.1 on port 8080
2003-9-26 8:22:49 org.apache.coyote.http11.Http11Protocol init
严重: Error initializing endpoint
java.io.FileNotFoundException: C:\Program Files\Apache Group\Tomcat 4.1\bin\..\%
TOMCAT_HOME%\conf\.keystore (系统找不到指定的路径。)
        at java.io.FileInputStream.open(Native Method)
        at java.io.FileInputStream.<init>(FileInputStream.java:106)
        at java.io.FileInputStream.<init>(FileInputStream.java:66)
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.initKeyStore(JSSESo
cketFactory.java:270)
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.initProxy(JSSESocke
tFactory.java:193)
        at org.apache.tomcat.util.net.jsse.JSSESocketFactory.createSocket(JSSESo
cketFactory.java:127)
        at org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoi
nt.java:275)
        at org.apache.coyote.http11.Http11Protocol.init(Http11Protocol.java:150)        at org.apache.coyote.tomcat4.CoyoteConnector.initialize(CoyoteConnector.
java:1117)
        at org.apache.catalina.core.StandardService.initialize(StandardService.j
ava:579)
        at org.apache.catalina.core.StandardServer.initialize(StandardServer.jav
a:2246)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:511)
        at org.apache.catalina.startup.Catalina.execute(Catalina.java:400)
        at org.apache.catalina.startup.Catalina.process(Catalina.java:180)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.
java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAcces
sorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:203)
Catalina.start: LifecycleException:  Protocol handler initialization failed: jav
a.io.FileNotFoundException: C:\Program Files\Apache Group\Tomcat 4.1\bin\..\%TOM
CAT_HOME%\conf\.keystore (系统找不到指定的路径。)
LifecycleException:  Protocol handler initialization failed: java.io.FileNotFoun
dException: C:\Program Files\Apache Group\Tomcat 4.1\bin\..\%TOMCAT_HOME%\conf\.
keystore (系统找不到指定的路径。)
        at org.apache.coyote.tomcat4.CoyoteConnector.initialize(CoyoteConnector.
java:1119)
        at org.apache.catalina.core.StandardService.initialize(StandardService.j

Answer 3

server.xml部分
    <!-- Define a SSL Coyote HTTP/1.1 Connector on port 8443 -->
    
    <Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
               port="8443" minProcessors="5" maxProcessors="75"
               enableLookups="true"
       acceptCount="100" debug="0" scheme="https" secure="true"
               useURIValidationHack="false" disableUploadTimeout="true">
      <Factory className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
               clientAuth="false" protocol="TLS" keystorePass="122129" keystoreFile="%TOMCAT_HOME%/conf/.keystore"/>
    </Connector>
   

Answer 4

keystoreFile="%TOMCAT_HOME%/conf/.keystore"有问题！首先TOMCAT_HOME要在classpath里设置。
“.keystore”是你keystore吗？里面有证书吗？为什么你的keystore的名字有“.”?
重新生成一下证书，把它放在keystore里，名字不要用 "."，必须把keystore 放在conf下。