title: How to connect Tomcat to SSL served via load balancer
body: <p>I'm trying to switch Tomcat from running on port 80 to run on 443.  The client wants to serve the SSL certificate via the Citrix NetScaler load balancer.  </p>
  
  <p>The issue is I can't get Tomcat to respond to requests on 443 without pointing to a certificate directly.  Does anyone know what configuration options to use in the Connector for this setup?  I haven't found any documentation that enables 443 without referring directly to a certificate file or store.</p>
  
  <p>Here are two options that I've found that allow Tomcat to start and still operate on 80, but are not responding on 443.  Other things I tried simply wouldn't allow Tomcat to start.</p>
  
  <pre><code>&lt;Connector port="443" protocol="org.apache.coyote.http11.Http11NioProtocol"
             maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
             clientAuth="false" sslProtocol="TLS" /&gt;
  </code></pre>
  
  <p>and</p>
  
  <pre><code>&lt;Connector port="443" protocol="HTTP/1.1" connectionTimeout="20000" /&gt;
  </code></pre>