supermap iServer配置https

修改 %SuperMap iServer_HOME%/bin 目录下的 catalina.bat 文件，即将客户端证书（key.truststore）添加到 iServer 中，用于验证 https 服务器身份。具体修改内容如下：

# 将
set JAVA_OPTS=%JAVA_OPTS% -Xms256m -Xmx1536m -XX:MaxPermSize=192m -Xss512k
#修改为
set JAVA_OPTS=%JAVA_OPTS% -Xms256m -Xmx512m -XX:MaxPermSize=192m -Xss512k -Djavax.net.ssl.trustStore=D:\key.truststore -Djavax.net.ssl.trustStoreType=JKS -Djavax.net.ssl.trustStorePassword=123456

开启SSL，修改iServer 配置文件 %SuperMap iServer_HOME%\conf\server.xml

首先注释APR

<!--APR library loader. Documentation at /docs/apr.html -->
<Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />


<!-- Define a SSL HTTP/1.1 Connector on port 8443 
         This connector uses the JSSE configuration, when using APR, the  
         connector should be using the OpenSSL style configuration 
         described in the APR documentation -->
#找到
<!-- 
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true" 
        … 
--> 
#解开注释 修改为

<Connector port="8443" protocol="HTTP/1.1"
                   SSLEnabled="true"
                   maxThreads="200"
                   scheme="https"
                   secure="true"
                   URIEncoding="utf-8"
                   clientAuth="false"
                   keystoreFile="D:\key.keystore"
                   keystorePass="123456"
                   clientAuth="false"
                   sslProtocol="TLS"
                   sslEnabledProtocols="TLSv1.2" >

重启iServer

或在html的header中加入

<meta http-equiv="Content-Security-Policy" content="upgrade-insecure-requests" />

强制将所有的请求升级为https

退步青年

supermap iServer配置https

Cesium笔记