TOMCAT建立SSL连接双向认证
之前有文章说了如何TOMCAT建立SSL连接单向认证 ，这里再说说怎么建立双向认证。
步骤如下
1.打开cmd
2.输入d:
3.输入md ssl
4.cd ssl
5.创建服务器证书库
keytool -genkey -dname "CN=test.wuhan.com, OU=NC, O=Shanghai University, L=ZB, ST=Shanghai,C=CN" -alias server? -keyalg RSA -keystore serverKeys.jks -keypass 123456 -storepass 123456 -validity 1000
这里cn是服务器域名
6.导出服务端证书
keytool -export -alias server -keystore serverKeys.jks -file server.cer? -storepass 123456
7.创建客户端证书库
keytool -genkey -alias alice -keysize 1024 -validity 3650 -keyalg RSA -dname "CN=zhu, OU=Developer,O=Techstar, L=Beijing, S=Beijing, C=CH" -keypass 123456 -storepass 123456 -keystore clientKeys.jks
8.导出客户端证书
keytool -export -alias alice -keystore clientKeys.jks -file alice.cer -storepass 123456
9.创建服务端KeyStore文件serverTrust.jks并导入客户端zhu公钥证书
keytool -import -alias alice -keystore serverTrust.jks -file alice.cer -keypass 123456 -storepass 123456
10.创建客户端KeyStore文件clientTrust.jks并导入服务端证书库
keytool -import -alias server -keystore clientTrust.jks -file server.cer -keypass 123456 -storepass 123456
11.TOMCAT中server.xml配置
??? <Connector protocol="org.apache.coyote.http11.Http11NioProtocol"
??? ??? ??? ??? port="8443"? enableLookups="true"
??? ??? ??? ??? disableUploadTimeout="true" acceptCount="100"
??? ??? ??? ??? maxThreads="200" scheme="https" secure="true"
??? ??? ??? ??? SSLEnabled="true"? sslProtocol="TLS"
??? ??? ??? ??? clientAuth="true"
??? ??? ??? ??? keystoreFile="D:\ssl\serverKeys.jks"
??? ??? ??? ??? keystorePass="123456"
??? ??? ??? ??? truststoreFile="D:\ssl\serverTrust.jks"
??? ??? ??? ??? truststorePass="123456"
??? ??? ??? ??? />
重启tomcat就OK了。如果是eclipse中的TOMCAT，会有些小问题，参考我之前的文章。
