title: Is any Tomcat setup needed for two way SSL using Apache?
body: <p>I have an application which runs on tomcat and hosts certain webservices. I also have an separate Apache server which has the configuration for one way and two way SSL setup. It has Virtualhost listening on 8881 which eventually redirect calls to tomcat port 8080 via AJP. I have also configured a <strong>cacerts.crt</strong> in Apache which contains all trusted CA certs which my clients use.</p>
  
  <p>Do I need to configure similar truststore or trusted CA in tomcat as well for SSL to work successfully?</p>
  
  <p>Or SSL is completely handled by apache and tomcat can be free from any such setting. In which case would tomcat need to be aware of allowed clients?</p>