如果需要给Tomcat开启Https，首先我们需要一个证书，下面演示如何创建。

创建证书

keytool -genkeypair -alias "tomcat" -keyalg "RSA" -keystore "localhost-rsa.jks"

后面的信息随便输入，我这里输入的是：

Enter keystore password: Re-enter new password: What is your first and last name? [Unknown]: pichWhat is the name of your organizational unit? [Unknown]: pichWhat is the name of your organization? [Unknown]: tomcatWhat is the name of your City or Locality? [Unknown]: beijingWhat is the name of your State or Province? [Unknown]: beijingWhat is the two-letter country code for this unit? [Unknown]: cnIs CN=pich, OU=pich, O=tomcat, L=beijing, ST=beijing, C=cn correct? [no]: yEnter key password for (RETURN if same as keystore password): Re-enter new password:

这样就会在当前目录创建一个localhost-rsa.jks文件。密码是123456，别名是tomcat。

给Tomcat配置证书

首先将上面生成的localhost-rsa.jks文件拷贝到Tomcat的conf目录，然后打开该目录下面的server.xml文件，找到如下代码，原来是注释了，现在需要打开注释更改为如下内容：

然后重新启动Tomcat，访问https://localhost:8443/

就可以看到如下页面：

可以看到地址栏是显示为不安全的。因为这个证书是我们自己制作的，浏览器默认不信任他，当然你可以手动信任他。12306他们的证书差不多就是这样制作的。