NOTE: The alias name in this command must be the same as the alias name used during the generation
of the private key and CSR.
Enable SSL in Tomcat with server.xml
To configure the server.xml file to enable SSL in Tomcat, please see the information below:
Open the server.xml config file using a text editor (ie. JAKARTA_HOME/conf/server.xml)
Search for the secure element in your config file (try searching for SSL Connector). By default it should look something like this:
<!-- SSL Connector on Port 443 -->
<!--
<Connector
className="org.apache.coyote.tomcat4.CoyoteConnector"
port="443" minProcessors="5"
maxProcessors="75"
enableLookups="false"
acceptCount="10"
connectionTimeout="60000" debug="0"
scheme="https" secure="true">
<Factory
className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
clientAuth="false" protocol="TLS"
keystoreFile="insert path to the keystore here"
keystorePass="insert keystore password here"/>
</Connector>
-->
Make sure the "keystoreFile" directive is referencing the correct keystore and the "keystorePass" directive is referencing
the correct keystore password.
NOTE: These directives are case-sensitive! Make sure the letters "F" and "P" in "keystoreFile" and "keystorePass" are in uppercase.
If your keystore contains more than one private key alias, please add the "keyAlias" directive to reference the correct private key alias name.
For Example:
keystoreFile="insert path to the keystore here"
keystorePass="insert keystore password here"
keyAlias="insert private key alias here"/>
Save the changes.
Stop and start Tomcat