tomcat + ssl

software:
apache-tomcat-5.5.33.tar.gz
cas-server-3.4.7-release.tar.gz
jrockit-jdk1.6.0_24-R28.1.3-4.0.1-windows-ia32.exe

environment:
JAVA_HOME=D:/Program Files/Java/jrockit-jdk1.6.0_24-R28.1.3-4.0.1
CLASSPATH=%JAVA_HOME%/lib/dt.jar;%JAVA_HOME%/lib/tools.jar;.
CATALINA_HOME=D:/Program Files/eclipse/tomcat/apache-tomcat-5.5.33

1.install java
run jrockit-jdk1.6.0_24-R28.1.3-4.0.1-windows-ia32.exe to install jdk to %JAVA_HOME%

2.set jdk environment
set JAVA_HOME
set CLASSPATH
set PATH

3.place tomcat
put tomcat to %CATALINA_HOME%

4.amend runtime
edit %CATALINA_HOME%/bin/startup.bat
set CATALINA_HOME=D:/Program Files/eclipse/tomcat/apache-tomcat-5.5.33

5.used keytool to self-author a server certificate
run cmd
change current directory to %CATALINA_HOME%
keytool -genkey -alias tomcat -keyalg RSA -keypass changeit -storepass changeit -keystore server.keystore -validity 3600
keytool -export -alias tomcat -file server.cer -keystore  server.keystore -storepass changeit
keytool -import -trustcacerts -alias tomcat -file server.cer -keystore  %JAVA_HOME%/jre/lib/security/cacerts -storepass changeit

6.amend tomcat configuration
edit %CATALINA_HOME%/conf/server.xml

         maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
         enableLookups="false" disableUploadTimeout="true"
         acceptCount="100" scheme="https" secure="true"
         clientAuth="false" sslProtocol="TLS"
    keystoreFile="server.keystore"
    keystorePass="changeit"
/>
caution : I try it. protocol="org.apache.coyote.http11.Http11Protocol" is need , otherwise you will not see the effects through url https://localhost:8443/cas

7.deploy cas.war
rename cas-server-webapp-3.4.7.war to cas.war
put cas.war to %CATALINA_HOME%/webapps/cas.war

8.start tomcat
run %CATALINA_HOME%/bin/startup.bat

9.test
browse the url https://localhost:8443/cas

reference :
http://blog.csdn.net/shangyu79/archive/2008/06/06/2515970.aspx
http://topic.csdn.net/u/20100816/09/27fc9ec9-1113-4620-97a6-c4d8d1ba2659.html