Generisite keystore koristeci keytool koji dolazi uz Javu:
keytool -genkey -alias tomcat -keyalg RSA -keystore mycert.jks
Kada je keystore generisan stavljena je sifra: changeit, keystore je smesten na lokaciju: d:\cert\
Izmeniti tomcat server.xml
Dodati:
<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
maxThreads="150" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" keystoreFile="d:\cert\mycert.jks" keystorePass="changeit" />
Ako hocete da ugasite http, zakomentarisite:
<Connector port="8080" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="8443" />