Apache SSL or Tomcat SSL

[pa...@visi.com]

Hey All,

Newbie here.  Been working with this stuff for about a week and a
half now.  Boss told me to get Tomcat and SOAP and add them to
the apache server and demonstrate they work.  Well, it took some
time but that's done.

Now he says:  Add SSL

My question is ....  I've been reading every thing I can get my
hands on and it looks like I can:

1) Add SSL to apache and run two servers (http on 80 and https on 
443 or whatever) or use the Virtual host stuff

-or-

2) Add SSL to Tomcat.

Do I need to do both even if all secure traffic will come through
Tomcat or could I get by just by getting Apache-SSl working?
Is one easier than the other (Apache with SSL or Tomcat with SSL)?

Particulars:  I'm running Apache 1.3.19, Tomcat 3.1.1, Soap 2.0,
              on a Solaris 7 System.
TIA,
Patrick.

-- 

e-mail:  patrick@visi.com