Konfigurasi HTTPS Apache Tomcat Menggunakan Keystore (.jks) #2

Dokumen ini menjelaskan langkah-langkah konfigurasi HTTPS pada Apache Tomcat menggunakan keystore .jks yang sudah tersedia (contoh: gisportal.id.jks).

Struktur Keystore Jika Ada Keystore

/opt/tomcat/ ├── conf/ ├── logs/ ├── ssl/ │ └── gisportal.id.jks <-- (jika sudah punya keystore) └── webapps/

File keystore: /opt/tomcat/ssl/gisportal.id.jks
User/Group: tomcat:tomcat
Tomcat Path: /opt/tomcat Port HTTPS: 8443
Alias: `Tomcat

Struktur Folder SSL

/opt/tomcat/ssl/gisportal.id.jks

Buat Permission

sudo chown tomcat:tomcat /opt/tomcat/ssl/gisportal.id.jks
sudo chmod 640 /opt/tomcat/ssl/gisportal.id.jks

Edit server.xml

Lokasi: /opt/tomcat/conf/server.xml

Cari bagian:

dan tambahkan konfigurasi konketor HTTPS Berikut kedalmnya:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
           maxThreads="150" SSLEnabled="true">
    <SSLHostConfig>
        <Certificate 
            certificateKeystoreFile="/opt/tomcat/ssl/gisportal.id.jks"
            type="RSA"
            certificateKeystorePassword="geonet$123" />
    </SSLHostConfig>
</Connector>

Validasi Keystore

pastikan keystore valid

keytool -list -v -keystore /opt/tomcat/ssl/gisportal.id.jks

Restart Tomcat

Gunakan Systemd

sudo systemctl daemon-reload

sudo systemctl deamon-rexeec

sudo systemctl restart tomcat

Validasi

Akses di browser

https://<ip-server-anda>:8443

image.png

335 KiB