How to Set up HTTPS SSL on Tomcat

Apache Tomcat, often referred to as Tomcat Server, is an open-source Java Servlet Container developed by the Apache Software Foundation (ASF). Tomcat implements several Java EE specifications including Java Servlet, JavaServer Pages (JSP), Java EL, and WebSocket, and provides a “pure Java” HTTP web server environment in which Java code can run.

This Tomcat Tutorial will show you how to set up HTTPs on Tomcat using a self signed cert.

We are running tomcat on windows in this tutorial but the process should be much the same for tomcat if it is installed on Linux.

In this tomcat tutorial we first generate the self signed cert by using the in built Java keytool. To so we first navigate into the JAVA_HOME bin folder and run the command to generate the certificate.

We then restart tomcat to ensure that the changes have been picked up.

Next we navigate to tomcat over https to ensure that it is working.

All commands and relevant code blocks are available here:

[russellbateman]

Your unstated goal of reducing these instructions to the smallest possible of steps was admirably achieved without leaving anything important out.

[moonmothman]

Great post. Far simpler than the instructions I've seen elsewhere.

[dougwan]

Nice and simple and this is still my favorite way of setting it up.

[marcinruszczyk]

I have seen a few explanations of this issue an I have to say this is the best . Clearly and without any mistakes. Thank you very much . Greetings from Poland .

[ramonmendoza]

Simple and clear, still valid after 4 years. Thanks you!

[donhil]

Thanks, Darren - crystal clear to me and i was able to make random changes and explore more.. well explained!

[ruvbvpt]

Wonderful tutorial, thank you 😊

I think there might be typo at 3:04 ("clinetAuth" instead of "clientAuth").
However, the video explains the topic well and straight to the point. Thank you very much ☺

[Franchyze]

helps me every time I need to do this! thanks

[hazhir]

perfect, worked correctly. appreciate it

[InayetHadi]

Hi. Thank you for the video. Next step is forcing http to https

[fransanchez]

I have the same question as @just IT ... Do i need to renew the cert later?

[jaysonmanaol]

Hi how can I do this if I already have a certificate using godaddy? A crt and key file? Thanks

[pirulito]

Hi Darrens, I have an issue with this, if set Conector port="8080" the browser does not connect, I need change it to Connector port="8443" and then connect, any idea ?

[vrindavaneshwari_ju_ki_kripa]

hey man! i already have certificate provided by my admin team, those are in .crt/.cer/.pfx format how can i use them?

[brunoluigi]

How do I enter a CA for production use?

[RDCST]

If I have a trusted certificate I only need to edit the Tomcat config on the server.xml file. I'm right?
Is that all?

[vivekrajchettiar]

how to redirect from port 8787 to 8080 if I have to make SSL run on 8080

[mohammadshalabi]

The link of command not opening, database issue !!!
Can please write the command in comment below

[jaiylonbabb]

I don't think the link to your website is working anymore

[radio_electronics]

You still have a certificate error and the browser tells you your connection is unsecure.
Not very helpful.