<Connector port="80" protocol="HTTP/1.1"
               connectionTimeout="20000"
               URIEncoding="UTF-8"
               redirectPort="443" />

<!-- 配置属性：algorithm认证编码算法默认SunX509,clientAuth是否使用证书链，默认为false，sslprotocol表示ssl协议版本号，默认TLS，cipers可以使用的加密算法列表，用逗号隔开。
如果连接器上有http2protocol类型的升级协议upgradeprotocol组件，尝试把压缩参数放上面connector.findUpgradeProtocols()， -->
<Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               keystoreFile="cert/XXX.pfx" cipers="RSA,ECC"
                keystoreType="PKCS12" algorithm="SunX509"
                keystorePass="XXX" clientAuth="false"
               clientAuth="false" sslProtocol="TLS">
<UpgradeProtocol className="org.apache.coyote.http2.Http2Protocol" />
</Connector>

<login-config>  
        <!-- Authorization setting for SSL -->  
        <auth-method>CLIENT-CERT</auth-method>  
        <realm-name>Client Cert Users-only Area</realm-name>  
    </login-config>  
    <security-constraint>  
        <!-- Authorization setting for SSL -->  
        <web-resource-collection >  
            <web-resource-name >SSL</web-resource-name>  
            <url-pattern>/*</url-pattern>  
        </web-resource-collection>  
        <user-data-constraint>  
            <transport-guarantee>CONFIDENTIAL</transport-guarantee>  
        </user-data-constraint>  
    </security-constraint>