一证书
keytool -genkey -alias tomcat -keyalg RSA -keystore E:/keys/keystore
keytool -export -trustcacerts -alias tomcat -file E:/keys/tomcat1.cer -keystore E:/keys/keystore
keytool -import -trustcacerts -alias tomcat -file E:/keys/tomcat1.cer -keystore "C:\Program Files\Java\jdk1.7.0_03\jre\lib\security\cacerts"
生成证书注意 然后输入姓氏：（这里为 cas-server.com） cas 服务器访问域名
＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝＝
keytool -delete -alias tomcat -keystore C:\Program Files\Java\jdk1.7.0_03\jre\lib\security\cacerts -storepass changeit
keytool -list -keystore "C:\Program Files\Java\jdk1.7.0_03\jre\lib\security/cacerts"
二 cas service tomcat (server.xml)
<Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" keystoreFile="E:/keys/keystore" keystorePass="123456" />
<!-- An Engine represents the entry point (within Catalina) that processes
原文：https://www.cnblogs.com/albert-think/p/9977489.html