本文将指导您如何将Tomcat（Joget运行依赖的Web服务器）设置 SSL. 请记住，这是服务层级（Tomcat）的配置，不是应用层级（Joget）. 不同的Web服务器设置方法不错.
1. 生成一个key store文件
首先, 我们将生成一个key store文件. 您可以用（或不用）SSL 证书（需从SSL证书供应商处购买）生成它. 以下是自己生成的例子（不用购买证书）.
C:\Program Files\Java\jdk1.7.0\bin>keytool -genkey -alias tomcat -keyalg RSA
Enter keystore password: password
Re-enter new password: password
What is your first and last name?
[Unknown]: Robert
What is the name of your organizational unit?
[Unknown]: home
What is the name of your organization?
[Unknown]: home
What is the name of your City or Locality?
[Unknown]: SF
What is the name of your State or Province?
[Unknown]: CA
What is the two-letter country code for this unit?
[Unknown]: US
Is CN=Robert, OU=home, O=home, L=SF, ST=CA, C=US correct?
[no]: yes
Enter key password for <tomcat>
(RETURN if same as keystore password): password
Re-enter new password: password
C:\Program Files\Java\jdk1.7.0\bin>
2. 配置您的Tomcat
请确保您的服务正在运行. 打开 \apache-tomcat\conf\server.xml, 解除以下内容的注释并根据需要编辑.
<!-- Define a SSL HTTP/1.1 Connector on port 8443
This connector uses the JSSE configuration, when using APR, the
connector should be using the OpenSSL style configuration
described in the APR documentation -->
<Connector port="443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS"
keystoreFile="C:/Users/Robert/.keystore"
keystorePass="password"
/>
Compared to the original settings, the following attributes have been added/changed.
port: 8443 to 443 (If you intend to browse to https://yourDomain instead of https://yourDomain:8443)
keystoreFile: Path to the .keystore file
keystorePass: The password defined earlier
Start your server. You may now surf to your Joget at *https://yourDomain/jw* or *https://yourDomain:8443/jw* depending on what is configured.
References: