标签:http java os io 问题 linux c window
#genkey:在tomcat根目录下
keytool -genkey -alias tomcat_cas -keyalg RSA -storepass changeit -keystore server.keystore -validity 3600
#list key:
keytool -list -keystore $JAVA_HOME/jre/lib/security/cacerts
#delete
keytool -delete -trustcacerts -alias tomcat_cas -keystore $JAVA_HOME/jre/lib/security/cacerts -storepass changeit
#export:在tomcat根目录下
keytool -export -trustcacerts -alias tomcat_cas -file server.cer -keystore server.keystore -storepass changeit
#import
keytool -import -trustcacerts -alias tomcat_cas -file server.cer -keystore $JAVA_HOME/jre/lib/security/cacerts -storepass changeit
(注:$JAVA_HOME:是linux下jdk根目录,如果是在windows下将其替换为:%JAVA_HOME% changeit为默认:storepass后的密码必须与genkey指令后的确认密码相同 在本地时域名为:localhost)
常用步骤:
1:genkey
2:export
3:import
4:设置tomcat/conf/server.xml
<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="/home/brin/webserver/apache-tomcat-6.0.32/casserver.keystore"
truststoreFile="/opt/jdk1.6.0_45/jre/lib/security/cacerts"
keystorePass="changeit" />
5:启动tomcat
6:https://localhost:8443/cas
常见问题补充:
1: java.io.IOException:Cannot recover key
storepass后的密码与genkey最后的确认密码不一致,可delete后重新genkey, export, import
2: java.io.IOException: Keystore was tempered with, or password was incorrect
tomcat/conf/server.xml中的keystorePass="xxx"密码输入错误
3: java.io.FileNotFoundException:/root/.keystore
tomcat/conf/server.xml中keystoreFile中没有添加或输入值有误
标签:http java os io 问题 linux c window
原文地址:http://www.cnblogs.com/Jiphen/p/3891034.html