Trying to do https download. Would like to create a web service without a UI. No soap or RET just simple https. However, need to do it with an application already doing LDAP which requires CAs in the keystore in the tomcat . In order to do the https securely, could use self-signed certificate. In the keystore, can I have both CA's and a self-signed certificate? Could the LDAP applicaton using https and https web service work together on same tomcat server? The LDAP application requires web browser certificate and proprietary CAs but the https application would require a self signed certifcate. Using tomcat 5.5. Could I just add the self-signed certificate to the java keystore already containing other server side certificates that LDAP uses and that tomcat looks for?