Martin, thanks for your reply, and for the SSL how-to link, I appreciate it.
I have come across a document which is quite useful, specfically about Securing Tomcat:
http://www.owasp.org/index.php/Securing_tomcat
I found it here:
https://help.ubuntu.com/community/ApacheTomcat5
Trevor