如何在tomcat上禁用HTTPS，并让它在8080端口上运行？

Question

我的server.xml.中有以下连接器我的应用程序在端口8080上运行，但我不再希望它在端口8443上运行。如何修改连接器以禁用HTTPS并仅在8080上运行Tomcat？谢谢

    <!--
    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />
    -->
    <!-- Define a SSL/TLS HTTP/1.1 Connector on port 8443
         This connector uses the NIO implementation that requires the JSSE
         style configuration. When using the APR/native implementation, the
         OpenSSL style configuration is required as described in the APR/native
         documentation -->
    <!--
    <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" />
    -->
    <Connector port="8443" protocol="HTTP/1.1"
               SSLEnabled="true" maxThreads="150" scheme="https" secure="true"
               keystoreFile="tomcat.keystore" keystorePass="changeit" sslEnabledProtocols="TLSv1.1,TLSv1.2"
               ciphers="TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"/>

Answer 1

This will work

  
    <Connector port="8080" protocol="HTTP/1.1"
               connectionTimeout="20000"
               redirectPort="8443" />
    
    <!-- Define a SSL/TLS HTTP/1.1 Connector on port 8443
         This connector uses the NIO implementation that requires the JSSE
         style configuration. When using the APR/native implementation, the
         OpenSSL style configuration is required as described in the APR/native
         documentation -->
    <!--
    <Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" />
    -->
<!--
    <Connector port="8443" protocol="HTTP/1.1"
               SSLEnabled="true" maxThreads="150" scheme="https" secure="true"
               keystoreFile="tomcat.keystore" keystorePass="changeit" sslEnabledProtocols="TLSv1.1,TLSv1.2"
               ciphers="TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256"/>
-->

Answer 2

从您的原始代码可以看出，请取消对port="8080 "部分的注释，并注释掉port="8443 "部分，如下所示:

请注意，这里详细解释了reDirectPort="8443"的含义

在此处输入图像描述

Answer 3

您需要一个连接器：

<Connector port="8080" protocol="HTTP/1.1"
           connectionTimeout="20000" />

并注释掉端口 8443 连接器。

这将只侦听关闭端口（在Server节中定义，默认为8005）和端口8080。但是，请注意，如果客户端代码想要升级到HTTPS，它将失败，因为您不再具有重定向端口。