原文网址：https://www.youyong.top/article/1159410e973cc

系统环境：

CentOS release 6.5 (Final)  x64

JDK 1.8.0_92

apache-tomcat-9.0.0.M6.tar.gz

apr-1.5.2.tar.gz

apr-util-1.5.4.tar.gz

openssl-1.0.2h.tar.gz

本人在安装的过程中，碰到了很多坑。尤其是需要注意的是，编译安装tomcat-native的时候，需要指定openssl，而编译安装openssl的时候，需要指定shared.

操作步骤如下

一：安装apr

tar -xvf apr-1.5.2.tar.gz
cd apr-1.5.2
./configure --prefix=/usr/local/apr
make
make install

二：安装apr-util

tar -xvf apr-util-1.5.4.tar.gz
cd apr-util-1.5.4
./configure --prefix=/usr/local/apr-util --with-apr=/usr/local/apr
make
make install

三：安装openssl

tar -xvf openssl-1.0.2h.tar.gz
cd openssl-1.0.2h
./config shared --prefix=/usr/local/openssl-1.0.2h
make depend
make
make install

注意这里必须指定shared

四：安装

tar -xvf apache-tomcat-9.0.0.M6.tar.gz
cd apache-tomcat-9.0.0.M6/bin
tar -xvf tomcat-native.tar.gz
cd tomcat-native-1.2.7-src/native
./configure --prefix=/usr/local/tomcat-native --with-apr=/usr/local/apr --with-Java-home=/usr/local/jdk1.8.0_92 --with-ssl=/usr/local/openssl-1.0.2h
make
make install

注意这里的--with-ssl 必须指定

五：配置ld

vim /etc/profile
export LD_LIBRARY_PATH=/usr/local/tomcat-native/lib:$LD_LIBRARY_PATH
source /etc/profile

六：生成证书

cd apache-tomcat-9.0.0.M6
mkdir ssl
cd ssl
openssl genrsa -out server.key 2048  
openssl rsa -in server.key -out server.key  
openssl req -new -x509 -key server.key -out ca.crt -days 3650 

七：配置tomcat

cd apache-tomcat-9.0.0.M6/conf
vim server.xml

找到如下内容

把这一段内容，取消注释

并改成如下内容

<Connector port="8443" protocol="org.apache.coyote.http11.Http11AprProtocol"
               maxThreads="150" SSLEnabled="true" >
        <UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
        <SSLHostConfig honorCipherOrder="false" >
            <Certificate certificateKeyFile="ssl/server.key"
                         certificateFile="ssl/ca.crt"
                         type="RSA" />
        </SSLHostConfig>
    </Connector>

保存退出，启动tomcat

最后，访问https://192.168.1.200:8443

注意，需要使用https

查看tomcat的访问日志

[root@localhost logs]# cat localhost_access_log.2016-06-07.txt   
192.168.1.95 - - [07/Jun/2016:12:04:56 +0800] "GET / HTTP/2.0" 200 11234  
192.168.1.95 - - [07/Jun/2016:12:04:56 +0800] "GET /tomcat.css HTTP/2.0" 200 5576  
192.168.1.95 - - [07/Jun/2016:12:04:56 +0800] "GET /tomcat.png HTTP/2.0" 200 5103  
192.168.1.95 - - [07/Jun/2016:12:04:56 +0800] "GET /bg-nav.png HTTP/2.0" 200 1401  
192.168.1.95 - - [07/Jun/2016:12:04:56 +0800] "GET /bg-middle.png HTTP/2.0" 200 1918  
192.168.1.95 - - [07/Jun/2016:12:04:56 +0800] "GET /bg-button.png HTTP/2.0" 200 713  
192.168.1.95 - - [07/Jun/2016:12:04:56 +0800] "GET /asf-logo.png HTTP/2.0" 200 17811  
192.168.1.95 - - [07/Jun/2016:12:04:56 +0800] "GET /bg-upper.png HTTP/2.0" 200 3103  
192.168.1.95 - - [07/Jun/2016:12:04:57 +0800] "GET /favicon.ico HTTP/2.0" 200 21630 

发现，HTTP/2 已经生效了。

原文网址：https://www.youyong.top/article/1159410e973cc