Install Tomcat Linux

References:

Steps To Install Tomcat For Linux:

Get apache-tomcat-9.0.73.tar.gz at https://tomcat.apache.org/download-90.cgi .
Make sure you already installed OpenJDK. Refer https://muzakkirskills.blogspot.com/2023/01/install-openjdk-for-linux.html on how to install OpenJDK on Linux.
Copy apache-tomcat-9.0.73.tar.gz to /opt folder.
Go to /opt and extract tomcat 9 file.

cd /opt tar -xvf apache-tomcat-9.0.73.tar.gz
Move tomcat files from the one created to the new one named tomcat9.

rm -rf /opt/tomcat9 mv apache-tomcat-9.0.73 tomcat9
Create a new user named tomcat.
groupadd --system tomcat useradd -d /opt/tomcat -r -s /bin/false -g tomcat tomcat
Make tomcat folder owned by tomcat user.
chown -R tomcat:tomcat /opt/tomcat9
Create a tomcat.service unit file under /etc/systemd/system/ .
vi /etc/systemd/system/tomcat.service
Value Inside tomcat.service .

[Unit] Description=Apache Tomcat Server 9 After=syslog.target network.target [Service] Type=forking User=tomcat Group=tomcat Environment=CATALINA_PID=/opt/tomcat9/temp/tomcat.pid Environment=CATALINA_HOME=/opt/tomcat9 Environment=CATALINA_BASE=/opt/tomcat9 ExecStart=/opt/tomcat9/bin/catalina.sh start ExecStop=/opt/tomcat9/bin/catalina.sh stop RestartSec=10 Restart=always [Install] WantedBy=multi-user.target
Reload the systemd configuration.
systemctl daemon-reload
Start the tomcat service, enable it to auto-start at system boot and check the status.
systemctl start tomcat.service systemctl enable tomcat.service systemctl status tomcat.service
Access tomcat web interface using browser . Use this link to open Tomcat page http://localhost:8080/ .

Steps To Enable HTTPS SSL on Tomcat:

Stop Tomcat service.
Go to your OpenJDK or JRE folder. Example like below.cd /opt/jdk-19.0.2/bin/
Generate a self signed certificate.
/opt/jdk-19.0.2/bin/keytool -genkey -alias tomcat -keyalg RSA -validity 8888 -ext san=ip:127.0.0.1 -keystore "/opt/localhost.jks"
Specify password. Please make sure that you remember your password or maybe you can keep it somewhere safe.
Specify First and last Name. Put anything you want.
Specify organizational unit, organization, City or Locality, State or Province, and country code. If you don't want, just keep it blank.
Specify “yes” when asked to confirm whether the information is correct.
When prompted for key password again, just press enter. If have warning, just ignore it.
Go to /opt folder and you will see localhost.jks the keystore you generated previously.
Copy the generated file to tomcat's home.cp /opt/localhost.jks /opt/tomcat9/
Make localhost.jks owned by tomcat.chown tomcat:tomcat /opt/tomcat9/localhost.jks
Go to /opt/tomcat9/conf, open the tomcat server.xml file, search for :8080 line and add new line to enable HTTPS.cd /opt/tomcat9/conf/ vi server.xml
<Connector protocol="HTTP/1.1" port="8443" maxThreads="200" scheme="https" secure="true" SSLEnabled="true" keystoreFile="/opt/tomcat9/localhost.jks" keystorePass="changeit" clinetAuth="false" sslProtocol="TLS" />
Before that, above command need to change the password with what you put previously at number 4.
Restart tomcat.
systemctl restart tomcat systemctl status tomcat
Access tomcat web interface using browser. https://localhost:8443 or https://SERVER_IP:8443 .

Posted byMuzakkir DzulkarnainPosted atMarch 13, 2023 Post a Comment

Share

Comments