How can I secure tomcat's application manager with ssl ? I already have the certificates for the site.
Thanks
Define the admin app inside a SSL connector.
You could try adding user-data-constraints in tomcat manager's web.xml. That might do the trick:
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
Maybe insert them before the /security-contraint closing tag in the HTML Manager commands section of that web.xml:
you can use nginx or apache in front of your tomcat to control access easily.