Run the following command to create self-signed certificate:

$ "${JAVA_HOME}/bin/keytool" -genkey \
-keyalg RSA \
-alias mtitek \
-keystore /opt/cert/keystore \
-dname "CN=localhost, OU=mtitek, O=mtitek, L=Montreal, ST=QC, C=CA" \
-keypass kp123456 \
-storepass sp123456 \
-validity 9999

Notes:

• CN: Common Name (First and last name)
  
• OU: Organizational Unit
  
• O: Organization
  
• L: City or Locality
  
• ST: State or Province
  
• C: two-letter country code
  

• storepass: keystore password (is used to access the keystore)
  
• keypass: key password (is used to access a certificate within the keystore)
  

Run the following command to verify that the certificate was created properly:

$ "${JAVA_HOME}/bin/keytool" -list -v -keystore /opt/cert/keystore
Enter keystore password: sp123456

Output:

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

Alias name: mtitek
Creation date: 13-Oct-2015
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=localhost, OU=mtitek, O=mtitek, L=Montreal, ST=QC, C=CA
Issuer: CN=localhost, OU=mtitek, O=mtitek, L=Montreal, ST=QC, C=CA
Serial number: 7eb0f60e
Valid from: Sun Oct 13 08:50:26 EDT 2015 until: Wed Feb 27 07:50:26 EST 2043
Certificate fingerprints:
     MD5:  2F:33:F2:81:CD:FA:AA:C2:CB:3E:68:E3:E2:1E:93:90
     SHA1: AD:94:5A:E1:23:8D:BA:CA:63:96:24:41:F1:26:9F:C4:2F:C4:C6:DE
     SHA256: AD:FE:78:B8:A7:D8:D4:2E:CF:F4:83:10:D8:24:56:39:7D:FB:5D:27:AF:21:F3:11:19:1B:73:38:9C:95:2C:94
     Signature algorithm name: SHA256withRSA
     Version: 3

Extensions:

#1: ObjectId: 2.5.29.14 Criticality=false
SubjectKeyIdentifier [
KeyIdentifier [
0000: 0F E1 56 7B C8 0F 51 1A   8B 5C 1F 2D 6A 4A 68 46  ..V...Q..\.-jJhF
0010: BB FD 0F 2F                                        .../
]
]

*******************************************
*******************************************

Edit the file: "${TOMCAT_HOME}/conf/server.xml".

Add the https connector:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
    maxThreads="150"
    scheme="https"
    secure="true"
    SSLEnabled="true"
    clientAuth="false"
    sslProtocol="TLS"
    keystoreFile="/opt/cert/keystore"
    keyAlias="mtitek"
    keystorePass="sp123456"
    keyPass="kp123456" />

URL: https://localhost:8443