Configuring Tomcat with SSL

Question

I followed the tutorial on the site Tomcat who basically tells you to do two things:

• Create a . Keystore with password changeit through Keytool.exe. I saved the resultate file in C: Users Vinicius

• Uncomment and modify the connector xml server. located in C: Program Files Apache Software Foundation Tomcat 8.0 conf

And it stayed like this:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxThreads="200" SSLEnabled="true" scheme="https" secure="true"        keystoreFile="C:\Users\Vinicius\.keystore" keystorePass="changeit"
clientAuth="false" sslProtocol="TLS" />

After that, in theory, just access my page by https://localhost:8443/ but I get the bug:

Connection to localhost has been refused.

I did something wrong?

Answer 1

To set up a Tomcat certificate follow these steps:

First you should create a P12 with openssl like this:

openssl pkcs12 -export -in fullchain.pem -inkey chavePrivada.pem -out Tomcat.P12 -name Tomcat

will be prompted a password for Keystore, put changeit.

After that you should create your JKS that way:

keytool -importkeystore -deststorepass changeit -destkeypass changeit -destkeystore Tomcat.jks -srckeystore Tomcat.P12 -srcstoretype PKCS12 -srcstorepass changeit -alias Tomcat

This will create a file called tomcat.jks

Soon you should set up the server.xml which is located in the folder $CATALINA_BASE/conf following on like this:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" URIEncoding="UTF-8" maxThreads="150" SSLEnabled="true" scheme="https" secure="true" clientAuth="false" sslProtocol="TLS" keystoreFile="/path/para/sua/jks/tomcat.jks" keystorePass="changeit" keyAlias="tomcat" keyPass="changeit"/>

Once this is done, restart Omcat and make sure everything is all right by logging in: https://localhost:8443/