修改tomcat/conf/server.xml

<Connector port="80" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="443"
               URIEncoding="UTF-8" />

    <Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
        maxThreads="150" scheme="https" secure="true"
        keystoreFile
 
="conf/www.xxx.com.jks"
        keystorePass="1234567890"
        clientAuth="false" sslProtocol="TLS" URIEncoding="UTF-8" /> 

支持http自動跳轉到https：修改tomcat/conf/web.xml

<login-config>
        <auth-method>CLIENT-CERT</auth-method>
        <realm-name>Client Cert Users-only Area</realm-name>
    </login-config>
    <security-constraint>
        <web-resource-collection>
        <web-resource-name>SSL</web-resource-name>
        <url-pattern>/*
 
</url-pattern>
        </web-resource-collection>
        <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
        </user-data-constraint>
    </security-constraint>

tomcat 配置https