Notes

Ujnotes — CC0 1.0

The certificate file i.e. keystore file can be a .p12 file, need not be a ‘.jks’.

The certificate file i.e. keystore file can be a .p12 file, need not be a ‘.jks’.

! Should be accessible by tomcat (user).

?should have password?

Default port. 443.

Prefer APR protocol

<Connector port="1443".

MaxThreads="200".

EnableLookups="false".

DisableUploadTimeout="true".

AcceptCount="100".

Debug="0".

Scheme="https".

Secure="true".

ClientAuth="false".

SslProtocol="TLS".

SSLEnabled="true".

keystoreFile="/opt/<company>/_.keystore|p12"

KeystoreType="PKCS12".

keystorePass="password"

Ciphers="SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_128_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA".

URIEncoding="UTF-8" />.

________________.

org.apache.coyote.http11.Http11Protocol

org.apache.coyote.http11.Http11Protocol <Connector

Protocol="HTTP/1.1".

Port="443".

MaxThreads="200".

Scheme="https".

Secure="true".

SSLEnabled="true".

SSLCertificateFile="/usr/local/ssl/server.crt".

SSLCertificateKeyFile="/usr/local/ssl/server.pem".

SSLVerifyClient="optional".

SSLProtocol="TLSv1"/>.