title: What are the steps to configure SSL for Tomcat?
body: <p>I am little bit confused about configuring SSL for Tomcat on my local computer. First of all, should I need to create a new keystore with keytool? And then should I import existing.pfx certicate file to that newly create java keystore(.jks file)? And finally export a new blabla.pfx file and add a new Connector which runs on 443 port like below:</p>
  
  <pre><code>&lt;Connector SSLEnabled="true" acceptCount="100" clientAuth="false" disableUploadTimeout="true" 
  enableLookups="false" keystoreFile="C:/dev/certificates/blabla.pfx" keystorePass="12345" 
  keystoreType="PKCS12" maxThreads="25" port="443"   protocol="org.apache.coyote.http11.Http11NioProtocol" 
  scheme="https" secure="true"` sslProtocol="TLS"/&gt;
  </code></pre>
  
  <p>What is cacerts? Should I also create a new cacerts file and adding it to the local server? Should I need to do something to make it trusted? Can you please explain the right and necessary order for adding existing certificate to local Tomcat.
  Thanks very much.</p>