1.制作私钥
keytool -genkey -v -alias tomcat -keyalg RSA -keystore /root/cert/tomcat.keystore -validity 36500
2.修改server.xml
<Connector executor="tomcatThreadPool"
port="443" protocol="org.apache.coyote.http11.Http11Protocol"
maxPostSize="-1"
compression="on"
compressionMinSize="2048"
noCompressionUserAgents="gozilla, traviata"
compressableMimeType="text/html,text/xml,text/javascript,application/javascript,text/css,text/plain,text/json"
maxHttpHeaderSize ="10240000"
connectionTimeout="20000"
acceptCount="100000"
URIEncoding="UTF-8"
SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" keystoreFile="/usr/local/tomcat/cert/tomcat.keystore" keystorePass="123456"/>