tomcat配置ssl（https）出错，进来看。

Question

按http://blog.csdn.net/zhjb1025/archive/2008/11/12/3279512.aspx这个配置
看了很多文章，都是出这个错，不知道为什么？
要不就是配了server.xml 然后访问：https：//localhost:8443没有任何反应！

好像是说找不到文件！请帮忙下。出错如下。

[code="java"]
2010-10-20 10:25:15 org.apache.catalina.core.AprLifecycleListener init
信息: Loaded APR based Apache Tomcat Native library 1.1.20.
2010-10-20 10:25:15 org.apache.catalina.core.AprLifecycleListener init
信息: APR capabilities: IPv6 [true], sendfile [true], accept filters [false], random [true].
2010-10-20 10:25:15 org.apache.catalina.startup.SetAllPropertiesRule begin
警告: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'minSpareThreads' to '25' did not find a matching property.
2010-10-20 10:25:15 org.apache.catalina.startup.SetAllPropertiesRule begin
警告: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'maxSpareThreads' to '75' did not find a matching property.
2010-10-20 10:25:15 org.apache.catalina.startup.SetAllPropertiesRule begin
警告: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'clientAuth' to 'false' did not find a matching property.
2010-10-20 10:25:15 org.apache.catalina.startup.SetAllPropertiesRule begin
警告: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'keystoreFile' to 'c:\server.keystore' did not find a matching property.
2010-10-20 10:25:15 org.apache.catalina.startup.SetAllPropertiesRule begin
警告: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'keystorePass' to 'changeit' did not find a matching property.
2010-10-20 10:25:15 org.apache.catalina.startup.SetAllPropertiesRule begin
警告: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'truststoreFile' to 'c:\server.truststore' did not find a matching property.
2010-10-20 10:25:15 org.apache.catalina.startup.SetAllPropertiesRule begin
警告: [SetAllPropertiesRule]{Server/Service/Connector} Setting property 'truststorePass' to 'changeit' did not find a matching property.
2010-10-20 10:25:16 org.apache.coyote.http11.Http11AprProtocol init
信息: Initializing Coyote HTTP/1.1 on http-8080
2010-10-20 10:25:16 org.apache.coyote.http11.Http11AprProtocol init
严重: Error initializing endpoint
java.lang.Exception: No Certificate file specified or invalid file format
at org.apache.tomcat.jni.SSLContext.setCertificate(Native Method)
at org.apache.tomcat.util.net.AprEndpoint.init(AprEndpoint.java:721)
at org.apache.coyote.http11.Http11AprProtocol.init(Http11AprProtocol.java:107)
at org.apache.catalina.connector.Connector.initialize(Connector.java:1014)
at org.apache.catalina.core.StandardService.initialize(StandardService.java:680)
at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:795)
at org.apache.catalina.startup.Catalina.load(Catalina.java:524)
at org.apache.catalina.startup.Catalina.load(Catalina.java:548)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:261)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
2010-10-20 10:25:16 org.apache.catalina.startup.Catalina load
严重: Catalina.start
LifecycleException: Protocol handler initialization failed: java.lang.Exception: No Certificate file specified or invalid file format
at org.apache.catalina.connector.Connector.initialize(Connector.java:1016)
at org.apache.catalina.core.StandardService.initialize(StandardService.java:680)
at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:795)
at org.apache.catalina.startup.Catalina.load(Catalina.java:524)
at org.apache.catalina.startup.Catalina.load(Catalina.java:548)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:261)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:413)
2010-10-20 10:25:16 org.apache.catalina.startup.Catalina load
信息: Initialization processed in 1181 ms
2010-10-20 10:25:16 org.apache.catalina.core.StandardService start
信息: Starting service Catalina
2010-10-20 10:25:16 org.apache.catalina.core.StandardEngine start
信息: Starting Servlet Engine: Apache Tomcat/6.0.29
2010-10-20 10:25:16 org.apache.catalina.startup.HostConfig deployDescriptor
信息: Deploying configuration descriptor host-manager.xml
2010-10-20 10:25:16 org.apache.catalina.startup.HostConfig deployDescriptor
信息: Deploying configuration descriptor manager.xml
2010-10-20 10:25:16 org.apache.catalina.startup.HostConfig deployDirectory
信息: Deploying web application directory docs
2010-10-20 10:25:17 org.apache.catalina.startup.HostConfig deployDirectory
信息: Deploying web application directory examples
2010-10-20 10:25:17 org.apache.catalina.core.ApplicationContext log
信息: ContextListener: contextInitialized()
2010-10-20 10:25:17 org.apache.catalina.core.ApplicationContext log
信息: SessionListener: contextInitialized()
2010-10-20 10:25:17 org.apache.catalina.startup.HostConfig deployDirectory
信息: Deploying web application directory ROOT
2010-10-20 10:25:17 org.apache.coyote.http11.Http11AprProtocol start
信息: Starting Coyote HTTP/1.1 on http-8080
2010-10-20 10:25:17 org.apache.coyote.http11.Http11AprProtocol start
严重: Error starting endpoint
java.lang.Exception: Socket bind failed: [730048] ?????????×???(Э?é/??????/???)????í?????Ρ?

at org.apache.tomcat.util.net.AprEndpoint.init(AprEndpoint.java:647)
at org.apache.tomcat.util.net.AprEndpoint.start(AprEndpoint.java:754)
at org.apache.coyote.http11.Http11AprProtocol.start(Http11AprProtocol.java:137)
at org.apache.catalina.connector.Connector.start(Connector.java:1087)
at org.apache.catalina.core.StandardService.start(StandardService.java:534)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
at org.apache.catalina.startup.Catalina.start(Catalina.java:581)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
2010-10-20 10:25:17 org.apache.catalina.startup.Catalina start
严重: Catalina.start:
LifecycleException: service.getName(): "Catalina"; Protocol handler start failed: java.lang.Exception: Socket bind failed: [730048] ?????????×???(Э?é/??????/???)????í?????Ρ?

at org.apache.catalina.connector.Connector.start(Connector.java:1094)
at org.apache.catalina.core.StandardService.start(StandardService.java:534)
at org.apache.catalina.core.StandardServer.start(StandardServer.java:710)
at org.apache.catalina.startup.Catalina.start(Catalina.java:581)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:289)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:414)
2010-10-20 10:25:17 org.apache.catalina.startup.Catalina start
信息: Server startup in 1750 ms

[/code]

Answer 1

我之前配置的一个步骤，给你参考一下，祝你好运。

1. 创建证书 需要安装JDK1.4以上版本并配置JAVA_HOME和PATH环境变量。

切换到命令窗口，并切换到某个目录下（比如C:\）
1)生成密钥
keytool -genkey -alias tomcat -keyalg RSA -keypass changeit -storepass changeit -keystore server.keystore -validity 3600
在交互命令行中，第一项“您的名字与姓氏是什么？”需要填写服务器域名（本机用localhost）

2)导出证书
keytool -export -trustcacerts -alias tomcat -file server.cer -keystore server.keystore -storepass changeit

3)加入JDK受信任库
keytool -import -trustcacerts -alias tomcat -file server.cer -keystore %JAVA_HOME%/jre/lib/security/cacerts -storepass changeit

还有两个辅助命令，如果需要的时候再使用：
查看受信任库内容
keytool -list -keystore %JAVA_HOME%/jre/lib/security/cacerts

从受信任库中删除
keytool -delete -trustcacerts -alias tomcat -keystore %JAVA_HOME%/jre/lib/security/cacerts -storepass changeit
2.修改Tomcat配置
在%TOMCAT_HOME%/conf/server.xml中找到Connector配置群，增加一项
port="8443" minSpareThreads="5" maxSpareThreads="75"
enableLookups="true" disableUploadTimeout="true"
acceptCount="100" maxThreads="200"
scheme="https" secure="true" SSLEnabled="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="C:/server.keystore"
keystorePass="changeit"/>
其中keystoreFile配置为密钥库所在路径，keystorePass配置为密钥库文件保护密码。
3.验证访问
重启Tomcat，在浏览器中访问配置好的Web应用，如果弹出“证书错误”页面，选“继续浏览”即可，不影响使用。