How to secure Tomcat on port 80?
===

I have a doubt about how to configure Tomcat 5.0.30 in my web application to securize port 80.

My current configuration in server.xml file is:

    <Connector port="8443" 
               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" debug="0" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" 
 	       keystoreFile="C:/Data/easyapIP/leaseplan/keystore/.keystore"
               keystorePass="psasslkey90" 
	/>

And in the web.xml file:

    <context-param>
        <param-name>listenPort_https</param-name>
        <param-value>8443</param-value>
    </context-param>

The problem with this configuration is that our client can't access here anymore because 8443 port is block in their firewall.

It seems that 80 is the only port they are allow to use, so I was trying to do the require changes to securize this port.

The obvious changes were:

    <Connector port="80" 
               maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
               enableLookups="false" disableUploadTimeout="true"
               acceptCount="100" debug="0" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS" 
           keystoreFile="C:/Data/easyapIP/leaseplan/keystore/.keystore"
               keystorePass="psasslkey90" 
    />

    <context-param>
        <param-name>listenPort_https</param-name>
        <param-value>80</param-value>
    </context-param>

But I can't get this to work, I receive an SSL error connection.

What am I doing wrong?


Thanks in advance.