본문 바로가기
Developer/Server & JVM

[Server] Tomcat JKS SSL인증서 적용 Server.xml

by 순수한소년 2024. 10. 23.
728x90
반응형

 
@

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
<?xml version='1.0' encoding='utf-8'?>
<Server port="8005" shutdown="SHUTDOWN">
    <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
    <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
    <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
    
    <GlobalNamingResources>
        <Resource name="UserDatabase" auth="Container"
                  type="org.apache.catalina.UserDatabase"
                  description="User database that can be updated and saved"
                  factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
                  pathname="conf/tomcat-users.xml" />
    </GlobalNamingResources>
    
    <Service name="Auth">
        <!--
            <Connector port="1024" address="톰캣아이피" protocol="HTTP/1.1" server=" "
              connectionTimeout="20000"
              redirectPort="8444" URIEncoding="UTF-8" useBodyEncodingForURI="true" />
        -->
        <Connector port="1025" address="톰캣아이피" protocol="org.apache.coyote.http11.Http11NioProtocol"
                   server=" " maxThreads="200" scheme="https" secure="true"
                   SSLEnabled="true" sslProtocol="TLS" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2"
                   useBodyEncodingForURI="true" URIEncoding="UTF-8"
                   keystoreFile="/어플리케이션이름/서브폴더/ssl/keystore_241023.jks" keystorePass="Epis01" />
        
        <Engine name="Auth" defaultHost="톰캣아이피"> 
            <Host name="톰캣아이피" appBase="/어플리케이션이름/서브폴더/webapps/auth" unpackWARs="true" autoDeploy="true">
            <Valve className="org.apache.catalina.valves.AccessLogValve"
                   directory="logs"
                   prefix="auth_access_log"
                   suffix=".log"
                   pattern="%{x-forwarded-for}i %h %l %u %t &quot;%r&quot; %s %b %{User-Agent}i" />
            
            <Valve className="org.apache.catalina.valves.RemoteIpValve"
                   remoteIpHeader="x-forwarded-for"
                   remoteIpProxiesHeader="true"
                   protocolHeader="x-forwarded-proto"
                   protocolHeaderHttpsValue="https"/>
            </Host>
        </Engine>
    </Service>
 
    <Service name="Admin">
        <!--
            <Connector port="8080" address="톰캣아이피" protocol="HTTP/1.1" server=" "
              connectionTimeout="20000"
              redirectPort="8443" URIEncoding="UTF-8" useBodyEncodingForURI="true" />
        -->
        <Connector port="8080" address="톰캣아이피" protocol="org.apache.coyote.http11.Http11NioProtocol"
                   server=" " maxThreads="200" scheme="https" secure="true"
                   SSLEnabled="true" sslProtocol="TLS" sslEnabledProtocols="TLSv1,TLSv1.1,TLSv1.2"
                   useBodyEncodingForURI="true" URIEncoding="UTF-8"
                   keystoreFile="/어플리케이션이름/서브폴더/ssl/keystore_241023.jks" keystorePass="Epis01" />
        
        <Engine name="Admin" defaultHost="톰캣아이피">
            <Host name="톰캣아이피" appBase="/어플리케이션이름/서브폴더/webapps/admin" unpackWARs="true" autoDeploy="true">
                <Context path="/public" docBase="/어플리케이션이름/서브폴더/webapps/auth/public" privileged="true" reloadable="true" />
                <Valve className="org.apache.catalina.valves.AccessLogValve"
                       directory="logs"
                       prefix="admin_access_log"
                       suffix=".log"
                       pattern="%{x-forwarded-for}i %h %l %u %t &quot;%r&quot; %s %b %{User-Agent}i" />
                
                <Valve className="org.apache.catalina.valves.RemoteIpValve"
                       remoteIpHeader="x-forwarded-for"
                       remoteIpProxiesHeader="true"
                       protocolHeader="x-forwarded-proto"
                       protocolHeaderHttpsValue="https"/>
            </Host>
        </Engine>
    </Service>
 </Server>
 
cs

@

728x90
반응형