SSL/TLS Configuration HOW-TO

https://tomcat.apache.org/tomcat-8.0-doc/ssl-howto.html

The description below uses the variable name $CATALINA_BASE to refer the    base directory against which most relative paths are resolved. If you have    not configured Tomcat for multiple instances by setting a CATALINA_BASE    directory, then $CATALINA_BASE will be set to the value of $CATALINA_HOME,    the directory into which you have installed Tomcat.

To install and configure SSL/TLS support on Tomcat, you need to follow these simple steps.  For more information, read the rest of this HOW-TO.

1. Create a keystore file to store the server's private key and self-signed certificate by executing the following command:

   Windows:

   "%JAVA_HOME%\bin\keytool" -genkey -alias tomcat -keyalg RSA

   Unix:

   $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA

   and specify a password value of "changeit".

2. Uncomment the "SSL HTTP/1.1 Connector" entry in    $CATALINA_BASE/conf/server.xml and modify as described in    the Configuration section below.