https tomcat 证书搭建

首先生成证书说明

keytool -genkey -alias castest -keyalg RSA -keystore c:/keys/caskey

先让输入密码，密码必须记住，下面会用到

其中“您的名字与姓氏是什么？”这是必填项，并且必须是TOMCAT部署主机的域名或者IP[如：gbcom.com 或者 10.1.25.251]（就是你将来要在浏览器中输入的访问地址），否则浏览器会弹出警告窗口，提示用户证书与所在域不匹配。在本地做开发测试时，应填 入“localhost”。

导出证书
keytool -export -file c:\keys\cas.crt -alias castest -keystore c:\keys\caskey

导入到服务端
keytool -import -keystore "C:\Program Files (x86)\Java\jdk1.8.0_73\jre\lib\security\cacerts" -file c:\keys\cas.crt -alias castest

2.配置tomcat

    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />
    <!-- A "Connector" using the shared thread pool-->
    <!--
    <Connector executor="tomcatThreadPool"
               port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />
    -->
    <!-- Define a SSL HTTP/1.1 Connector on port 8443
         This connector uses the BIO implementation that requires the JSSE
         style configuration. When using the APR/native implementation, the
         OpenSSL style configuration is required as described in the APR/native
         documentation -->
    <!-- protocol="org.apache.coyote.http11.Http11Protocol" -->
    <Connector port="8443" protocol="HTTP/1.1"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS"
			   keystoreFile="c:\keys\caskey"
			   keystorePass="123456"/>

主要是配置keystoreFile 为证书说明 和 keystorePass 位上面输入的密码

其他：参考度娘