TOMCAT SSL CERTIFICATE

 Configuring of Tomcat to take benefit of secure sockets is important while running it as a standalone web server. Running Tomcat as Servlet container behind another web server is important for configuring the primary web server for handling SSL connections from users.

The server will be negotiating all SSL related functionality and then passing on any requests meant for the Tomcat container after requests are decrypted.

Tomcat then returns cleartext responses which get encrypted by primary server before getting returned to the browser of the user. Here the communication between primary web server and the client are takes place over a secure connection but it does not contribute in the encryption or decryption.