Question

My first question – isn’t it possible to use https without using a Digital Certificate?
My second question – I’m securing few pages within my web application. So added the following

<security-constraint>
    <web-resource-collection>
        ......
    </web-resource-collection>
    <auth-constraint>
        ......
    </auth-constraint>
    <user-data-constraint>
        <transport-guarantee>CONFIDENTIAL</transport-guarantee>
    </user-data-constraint>
</security-constraint>

I tried running the app and the pages for which ssl is enabled doesn’t load. So I went ahead with creating certificate. Added the following in server.xml?

<Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
       maxThreads="150" 
       scheme="https" 
       secure="true" 
       keystoreFile="C:\Program Files\apache-tomcat-7.0.11-windows-x86\apache-tomcat-7.0.11\.keystore" 
       keystorePass="johneipe"
       clientAuth="optional" 
       sslProtocol="TLS" />

Still I’m unable to access those pages nor https://localhost:8443.

Answer 1

Change your protocol to
protocol="org.apache.coyote.http11.Http11Protocol"

This will solve the issue.