For anyone else who stumbles upon this: The key (pun not intended) is to import your certificate using the same alias as the one you used to originally create they keystore (along with its private key) when you ran 'keytool -genkey-alias myalias ...' -- this is how Tomcat ties the private key with your new certificate when it is imported.
Basically, like ...
As per SSL/TLS Configuration HOW-TO:
To define a Java (JSSE) connector, regardless of whether the APR library is loaded or not, use ONE of the following:
<!-- Define a HTTP/1.1 Connector on port 8443, JSSE NIO implementation -->
<Connector protocol="org.apache.coyote.http11.Http11NioProtocol" port="8443" .../>
<!-- Define a HTTP/1.1 ...
Java Allocated Heap and Windows Working Set are not the same thing exactly.
Your 1.5 GB difference is because of how memory gets addressed on Windows. To explain this, here are the facts that I think are most relevant:
'xmx' is 6 GB
You are on Windows
"Limit" in your graph is 5.3 GB.
You only see this after the server has been running for days
On Windows, ...