java - 如何设置 Apache Tomcat 8 以在 HTTPS 上运行 servlet 应用程序

Question

我想在 HTTPS 而不是 HTTP 上运行我的 servlet，所以我按照 this thread 上的说明进行操作并对我的 servlet 应用程序的 web.xml 进行了以下更改:

<security-constraint>
    <web-resource-collection>
        <web-resource-name>Bookyard Server</web-resource-name>
        <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
</security-constraint>

但是，当我在 Eclipse 中 Run As -> Run on Server 时，我得到以下页面:

当我在 Fiddler 中编写相同的请求时，我看到服务器返回 502，表明服务器没有在我使用的端口 (8443) 上监听。

HTTP/1.1 502 Fiddler - Connection Failed Date: Mon, 29 Aug 2016 12:22:14 GMT Content-Type: text/html; charset=UTF-8 Connection: close Cache-Control: no-cache, must-revalidate Timestamp: 17:52:14.594

[Fiddler] The connection to 'localhost' failed.
Error: ConnectionRefused (0x274d).
System.Net.Sockets.SocketException No connection could be made because the target machine actively refused it 127.0.0.1:8443

当我通过代码向这个 Url 发出 Web 请求时，它会导致 java.net.ConnectException: Connection refused 异常。

因此，我显然没有正确设置。你能帮帮我吗？

更新

在根据 Nicolas Filotto 提供的答案进行更改后，当我通过启动 Tomcat 安装文件夹中的 startup.bat 文件手动启动 Tomcat，然后浏览到 https://localhost:8443，它在浏览器中显示无效证书错误，我在浏览器中为此 URL 添加了一个异常(exception)，我看到 Tomcat 启动画面就好了。

但是当我在 Eclipse 中启动该应用程序时，它求助于旧的非 SSL URL 并提供页面，就好像它来自不安全的 URL。

如果这可能是有关错误的有用提示，控制台窗口会输出它。

Aug 29, 2016 6:47:16 PM org.apache.tomcat.util.digester.SetPropertiesRule begin WARNING: [SetPropertiesRule]{Server/Service/Engine/Host/Context} Setting property 'source' to 'org.eclipse.jst.jee.server:Bookyard.server' did not find a matching property. Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Server version: Apache Tomcat/8.0.36 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Server built: Jun 9 2016 13:55:50 UTC Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Server number: 8.0.36.0 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: OS Name:
Windows 7 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: OS Version: 6.1 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Architecture: amd64 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Java Home: C:\Program Files\Java\jre1.8.0_65 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: JVM Version: 1.8.0_65-b17 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: JVM Vendor: Oracle Corporation Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: CATALINA_BASE:
C:\Sathyaish\Practice\Java\eclipse\workspace.metadata.plugins\org.eclipse.wst.server.core\tmp1 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: CATALINA_HOME: C:\Program Files\Apache Software Foundation\Tomcat 8.0 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Command line argument: -Dcatalina.base=C:\Sathyaish\Practice\Java\eclipse\workspace.metadata.plugins\org.eclipse.wst.server.core\tmp1 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Command line argument: -Dcatalina.home=C:\Program Files\Apache Software Foundation\Tomcat 8.0 Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Command line argument: -Dwtp.deploy=C:\Sathyaish\Practice\Java\eclipse\workspace.metadata.plugins\org.eclipse.wst.server.core\tmp1\wtpwebapps Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Command line argument: -Djava.endorsed.dirs=C:\Program Files\Apache Software Foundation\Tomcat 8.0\endorsed Aug 29, 2016 6:47:16 PM org.apache.catalina.startup.VersionLoggerListener log INFO: Command line argument: -Dfile.encoding=Cp1252 Aug 29, 2016 6:47:16 PM org.apache.catalina.core.AprLifecycleListener lifecycleEvent INFO: The APR based Apache Tomcat Native library which allows optimal performance in production environments was not found on the java.library.path: C:\Program Files\Java\jre1.8.0_65\bin;C:\Windows\Sun\Java\bin;C:\Windows\system32;C:\Windows;C:/Program Files/Java/jre1.8.0_65/bin/server;C:/Program Files/Java/jre1.8.0_65/bin;C:/Program Files/Java/jre1.8.0_65/lib/amd64;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Sony\VAIO Startup Setting Tool;C:\Program Files\Trend Micro\AMSP;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\TortoiseGit\bin;C:\Program Files (x86)\Smart Projects\IsoBuster;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SDKs\TypeScript\1.0\;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\120\DTS\Binn\;C:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\ManagementStudio\;C:\Program Files (x86)\Microsoft SQL Server\120\DTS\Binn\;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Microsoft\Web Platform Installer\;C:\Program Files (x86)\QuickTime\QTSystem\;C:\Program Files\Git\cmd;C:\Program Files\nodejs\;C:\Program Files\Microsoft SQL Server\130\Tools\Binn\;C:\Users\computer\AppData\Local\Programs\Python\Python36\Scripts\;C:\Users\computer\AppData\Local\Programs\Python\Python36\;C:\Users\computer.dnx\bin;C:\Users\computer\AppData\Roaming\npm;C:\Sathyaish\Software\eclipse-jee-mars-2-win32-x86_64\eclipse;;. Aug 29, 2016 6:47:16 PM org.apache.coyote.AbstractProtocol init INFO: Initializing ProtocolHandler ["http-nio-8080"] Aug 29, 2016 6:47:17 PM org.apache.tomcat.util.net.NioSelectorPool getSharedSelector INFO: Using a shared selector for servlet write/read Aug 29, 2016 6:47:17 PM org.apache.coyote.AbstractProtocol init INFO: Initializing ProtocolHandler ["ajp-nio-8009"] Aug 29, 2016 6:47:17 PM org.apache.tomcat.util.net.NioSelectorPool getSharedSelector INFO: Using a shared selector for servlet write/read Aug 29, 2016 6:47:17 PM org.apache.catalina.startup.Catalina load INFO: Initialization processed in 2448 ms Aug 29, 2016 6:47:17 PM org.apache.catalina.core.StandardService startInternal INFO: Starting service Catalina Aug 29, 2016 6:47:17 PM org.apache.catalina.core.StandardEngine startInternal INFO: Starting Servlet Engine: Apache Tomcat/8.0.36 Aug 29, 2016 6:47:19 PM org.apache.catalina.util.SessionIdGeneratorBase createSecureRandom INFO: Creation of SecureRandom instance for session ID generation using [SHA1PRNG] took [283] milliseconds. Aug 29, 2016 6:47:20 PM org.apache.coyote.AbstractProtocol start INFO: Starting ProtocolHandler ["http-nio-8080"] Aug 29, 2016 6:47:20 PM org.apache.coyote.AbstractProtocol start INFO: Starting ProtocolHandler ["ajp-nio-8009"] Aug 29, 2016 6:47:20 PM org.apache.catalina.startup.Catalina start INFO: Server startup in 2920 ms

Answer 1

您还必须在文件 conf/server.xml 中取消注释 https 的连接器:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" />

只需按照此 guide因为您还需要创建证书并将相关属性添加到连接器的配置中。

最后，它应该看起来像这样:

<Connector
           protocol="org.apache.coyote.http11.Http11NioProtocol"
           port="8443" maxThreads="150"
           scheme="https" secure="true" SSLEnabled="true"
           keystoreFile="/path/to/my/keystore" keystorePass="My keystore password"
           clientAuth="false" sslProtocol="TLS"/>