openssl genrsa -out www.mydomain.com.key 2048
openssl req -new -sha256 -key www.mydomain.com.key -out www.mydomain.com.csr
2. Submit CSR file to your Certificate Authority to generate & share valid CA certificates.
Valid CA certificates would have following files
a. www.mydomain.com.crt
b. xxxxCARoot.crt
c. xxxxTrustxxx.crt
d. xxxxxxxCA2.crt
3. Bundle CA, CA2 and Trust certificate into single file bundle.crt
4. Generate pkcs12 file using below command and provide keystorePass as 'changeit'
>openssl pkcs12 -export -in www.mydomain.com.crt -inkey www.mydomain.com.key -out www.mydomain.com.p12 -name tomcat -CAfile bundle.crt -caname root -chain
5. Configure tomcat server.xml with below <Connector>
<Connector SSLEnabled="true" keystoreFile="conf/ssl/www.mydomain.com.p12" keystorePass="changeit" keystoreType="PKCS12" port="443" protocol="HTTP/1.1" scheme="https" secure="true" sslProtocol="TLSv1.2"/>