We do the same - via mod_jk we utilize apache httpd to handle the SSL. Keeps things simple and works well. John Larsen
On Wed, Apr 17, 2019 at 7:44 AM TurboChargedDad . <linuxhpc...@gmail.com> wrote: > We terminated SSL above the tomcat layer using NGINX or Apache to avoid > the complexities that come with managing a JKS. I want to hear all I can > on this subject. >