title: Configuring Tomcat to Use SSL
body: <p>My first question - isn't it possible to use https without using a Digital Certificate? 
  My second question - I'm securing few pages within my web application. So added the following </p>
  
  <pre><code>&lt;security-constraint&gt;
      &lt;web-resource-collection&gt;
          ......
      &lt;/web-resource-collection&gt;
      &lt;auth-constraint&gt;
          ......
      &lt;/auth-constraint&gt;
      &lt;user-data-constraint&gt;
          &lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt;
      &lt;/user-data-constraint&gt;
  &lt;/security-constraint&gt;
  </code></pre>
  
  <p>I tried running the app and the pages for which ssl is enabled doesn't load. So I went ahead with creating certificate. Added the following in server.xml?</p>
  
  <pre><code>&lt;Connector port="8443" protocol="HTTP/1.1" SSLEnabled="true"
         maxThreads="150" 
         scheme="https" 
         secure="true" 
         keystoreFile="C:\Program Files\apache-tomcat-7.0.11-windows-x86\apache-tomcat-7.0.11\.keystore" 
         keystorePass="johneipe"
         clientAuth="optional" 
         sslProtocol="TLS" /&gt;
  </code></pre>
  
  <p>Still I'm unable to access those pages nor <a href="https://localhost:8443" rel="noreferrer">https://localhost:8443</a>.</p>