[scriptbox]

First you will need to create a keystore & then use the command:

$JAVA_HOME/bin/keytool -certreq -keylag RSA -alias -file.csr -keystroke [path/to/your/keystore]

to generate the CSR. The CSR is what your Certificate Authority (CA) will use to create the SSL certificate. A file yourcertificatename.csr will be created.

To import the Root Certificate use the following commands:

keytool -import -alias root -keystore [path/to/your/keystore] -trustcacerts -file [path/to/the/root_certificate

$keytool-import -alias [youralias] -keystore [path/to/your/keystore] -file [path/to/your_keystore]

Take a look at this tutorial which goes through the steps of how to configure SSL/TLS for Apache Tomcat:

+ https://hostadvice.com/how-to/how-to-configure-https-in-apache-tomcat/