Tomcat http -> https 적용, ssl

발급받은 인증키 .keystore 혹 .jks로 변환후

server.xml에

1.

<Connector port="80" protocol="HTTP/1.1"

               connectionTimeout="20000"

               maxPostSize="10485760"

               redirectPort="443" />

2.

 

    <Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"

               maxThreads="150" SSLEnabled="true" connectionTimeout="20000" maxPostSize="10485760">

        <SSLHostConfig>

            <Certificate certificateKeystoreFile="/root/apache-tomcat-9.0.70/ssl/ssl.jks" type="RSA" certificateKeystorePassword="" />

        </SSLHostConfig>

    </Connector>

2번 3번 내용중 둘중하나를 넣던지 아니면 둘다 넣어도 적용되는거같다.(몰라서 두개다넣음)

 

3.

<Connector SSLEnabled="true" clientAuth="false" keystoreFile="/root/apache-tomcat-9.0.70/ssl/ssl.jks" keystorePass="" maxThreads="150" port="443"

    protocol="org.apache.coyote.http11.Http11NioProtocol" scheme="https" secure="true" sslProtocol="TLS" connectionTimeout="20000" maxPostSize="10485760">

    </Connector>

 

web.xml에 해당 내용 추가

    <security-constraint>

       <web-resource-collection>

           <web-resource-name>Secured Area</web-resource-name>

           <url-pattern>/*</url-pattern> <!-- All URLs are protected -->

       </web-resource-collection>

       <user-data-constraint>

           <transport-guarantee>CONFIDENTIAL</transport-guarantee>

       </user-data-constraint>

    </security-constraint>

후에 서버 재시작하고 http 주소 접속하게되면 https로 리다이렉트되는걸 확인할 수 있다.