1、选择基础镜像
docker pull tomcat:7.0-jre8
2、生成HTTPS证书
keytool -genkey -alias tomcat -keyalg RSA -keystore tomcat.keystore
root@HX-StrMedia:~/ssl# ls
tomcat.keystore
3、启动tomcat容器并导入证书
root@7632c9d5c82b:/usr/local/tomcat# ls /tmp/
tomcat.keystore
root@7632c9d5c82b:/usr/local/tomcat# mkdir keys
root@7632c9d5c82b:/usr/local/tomcat# cp /tmp/tomcat.keystore keys/
root@7632c9d5c82b:/usr/local/tomcat# ls keys/
tomcat.keystore
4、Commit
不退出容器在宿主机commit
root@HX-StrMedia:~/ssl# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
d3a3c7964a89 tomcat:7.0-jre8 "bash" 28 seconds ago Up 26 seconds 8080/tcp determined_mahavira
root@HX-StrMedia:~/ssl# docker images;
REPOSITORY TAG IMAGE ID CREATED VIRTUAL SIZE
tomcat https 5308378959ab About a minute ago 560.8 MB
5、启动并访问
root@HX-StrMedia:~/ssl# docker run --rm -ti -p 9099:8080 tomcat:https
root@HX-StrMedia:~/ssl# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
532a4ef7efcc tomcat:https "bash" 29 seconds ago Up 29 seconds 0.0.0.0:9099->8080/tcp thirsty_bhaskara
Docker（十一）：Docker实战部署HTTPS的Tomcat站点
原文：http://www.cnblogs.com/dukuan/p/7667807.html