Any 'cookbook' instructions on how to enable SSL on Tomcat ?

[Arieh Markel <Ar...@Central.Sun.COM>]

I would appreciate if anybody could point at instructions on providing
SSL support on an embedded Tomcat instance (ours is currently based on 3.1).


After having downloaded the JCE (Java Cryptographic Extension) 
and JSSE (Java Secure Socket Extension) I am wondering about the scope
of the effort I need to take.


Here is my (initial) shot at it:

(in the context of implementation of ssl sockets)

  a. Extend the SSLServetSocket and SSLServerSocketFactory classes
     implementing the abstract classes mentioned.
  b. Use appropriate cypher suites from the JCE package
  

(in the context of jakarta/tomcat)

  a. Create a SSLTcpConnection class that will use a java.net.ssl.SSLSocket 
     instead of a java.net.Socket.
  b. Create a SSLTcpConnectionHandler that will use the SSLTcpConnection
     class mentioned before.
  c. Create appropriate connectors (programmatically, or via server.xml)



a. Is what I mention here a proper approach ?

b. Now, has anybody already implemented such a scheme ?

c. Is it possible to have a look at the code to see how it was done ?

d. Is it possible to re-use such code ?


If the answer to a. is negative, what is a preferred/better approach ?
Pointers to relevant documentation ?

Questions b., c., d. still valid for the appropriate solution.


Thanks,

Arieh
--
 Arieh Markel		                Sun Microsystems Inc.
 Network Storage                        500 Eldorado Blvd. MS UBRM11-194
 e-mail: arieh.markel@sun.COM           Broomfield, CO 80021
 Let's go Panthers !!!!                 Phone: (303) 272-8547 x78547
 (e-mail me with subject SEND PUBLIC KEY to get public key)