HTTPS and SSL: Useful Links for CISC474

Tomcat 5 Configuration, and Certificates

• The Apache Jakarta Tomcat 5 Servlet/JSP Container: SSL Configuration HOW-TO. Includes explanation of what a "certificate" is, and how you go about getting one.
  
  The bottom line is:
  • If you need to be able to prove to other people that you "are who you say you are", then you need to purchase a signed certificate from a certificate granting authority, such as VeriSign, GeoTrust, Thawte, or XRamp.
  • If you only need encryption, you can "self-sign" your own certificate.