Tomcat 8.5 <JKS> SSL 설정하기

✅ <test.jks> 문서 경로

＃ cd /home/test/cert/

 

---

 

✅ 파일의 인증서 목록과 관련된 상세 정보 조회

＃ keytool -list -v -keystore /home/test/cert/test.jks

＃ Password

 

---

 

✅ Tomcat server.xml 수정

＃ cd /usr/local/tomcat/conf

＃ vi server.xml

<!-- tomcat/conf/server.xml -->
<!-- 기존 port값 들어간 Connector 주석처리할 것 -->

<!-- http 접속 시 https로 리다이렉트 -->
<Connector URIEncoding="UTF-8" port="80" acceptCount="100" enableLookups="false" maxThreads="150" redirectPort="443" />
<!-- SSL 설정 -->
<Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"
    maxThreads="150" SSLEnabled="true" scheme="https" ecure="true"
    maxParameterCount="1000"
>
    <SSLHostConfig>
        <Certificate certificateKeystoreFile="/home/test/cert/test.jks"
                       certificateKeystorePassword="비밀번호"
                       certificateKeyAlias="test" type="RSA" />
    </SSLHostConfig>
</Connector>

 

---

✅ Tomcat web.xml 수정

＃ cd /usr/local/tomcat/conf

＃ vi web.xml

<!-- tomcat/conf/web.xml -->
<!-- 하단에 추가 -->

<security-constraint>
    <web-resource-collection>
        <web-resource-name>SSL Forward</web-resource-name>
        <url-pattern>/*</url-pattern>
    </web-resource-collection>
    <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
</security-constraint>

 

---

 

✅ LISTEN 중인 포트 정보 표시

＃ netstate -lntp

 

⭐ 방화벽 여부 확인 후 진행 할 것 ⭐

✅ 443 포트가 비활성화일 때

◾ 방화벽 443 포트 추가

＃ firewall-cmd --permanent --add-port=443/tcp

◾ 방화벽 443 포트 삭제

＃ firewall-cmd --permanent --remove-port=443/tcp

 

◾ 방화벽 설정

＃ firewall-cmd --reload