Tomcat无法以ssl开头-我错过了什么吗？

Question

我有以下设置

1. 从ssl.com购买的SSL证书

2. 安装使用

   keytool -import xxx

我的别名是...keytool-列表-v -keystore /home/ubuntu/kykeystore.jks | grep Alias输入密钥库密码：密码别名：goas别名：inter别名：root1别名：root2

4）我的tomcat配置是（server.xml）

<Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443"
          />

-
       <Connector port="8443" maxHttpHeaderSize="8192" 
               maxThreads="1000"  scheme="httpe" secure="true" SSLEnabled="true" clientAuth="false"
               sslEnabledProtocol="TLSv1,TLSv1.1,TLSv1.2" 
               keystoreFile="/home/ubuntu/kykeystore.jks" 
               keystorePass="password" 
              keyAlias="inter" />

5）重新启动了tomcatsudo服务tomcat9重新启动

我在catalina.out中看到此错误。您能帮我吗？

org.apache.catalina.util.LifecycleBase.handleSubClassException Failed to initialize component [Connector[HTTP/1.1-8443]]
 org.apache.catalina.LifecycleException: Protocol handler initialization failed
        at org.apache.catalina.connector.Connector.initInternal(Connector.java:983)
        at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
        at org.apache.catalina.core.StandardService.initInternal(StandardService.java:535)
        at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
        at org.apache.catalina.core.StandardServer.initInternal(StandardServer.java:1055)
        at org.apache.catalina.util.LifecycleBase.init(LifecycleBase.java:136)
        at org.apache.catalina.startup.Catalina.load(Catalina.java:589)
        at org.apache.catalina.startup.Catalina.load(Catalina.java:612)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.base/java.lang.reflect.Method.invoke(Method.java:566)
        at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:306)
        at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:491)
Caused by: java.lang.IllegalArgumentException: Alias name [inter] does not identify a key entry
        at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:114)
        at org.apache.tomcat.util.net.AbstractJsseEndpoint.initialiseSsl(AbstractJsseEndpoint.java:85)
        at org.apache.tomcat.util.net.NioEndpoint.bind(NioEndpoint.java:224)
        at org.apache.tomcat.util.net.AbstractEndpoint.bindWithCleanup(AbstractEndpoint.java:1085)
        at org.apache.tomcat.util.net.AbstractEndpoint.init(AbstractEndpoint.java:1098)
        at org.apache.coyote.AbstractProtocol.init(AbstractProtocol.java:557)
        at org.apache.coyote.http11.AbstractHttp11Protocol.init(AbstractHttp11Protocol.java:74)
        at org.apache.catalina.connector.Connector.initInternal(Connector.java:980)
        ... 13 more
Caused by: java.io.IOException: Alias name [inter] does not identify a key entry
        at org.apache.tomcat.util.net.jsse.JSSEUtil.getKeyManagers(JSSEUtil.java:248)
        at org.apache.tomcat.util.net.openssl.OpenSSLUtil.getKeyManagers(OpenSSLUtil.java:94)
        at org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:112)
        ... 20 more

Answer 1

给定的别名不包含私钥。使用以下命令检查别名是否可用。

keytool -list -keystore /home/ubuntu/kykeystore.jks -v