I have an existing web application hosted in Tomcat which is listening for a HTTP POST.

However for security reasons requests to the web application have to be transported across the network as HTTPS.

I cannot change the web application.

So I want to receive a HTTPS POST, decrypt it and pass it on to the web application as a HTTP POST.

I also need to pass back to the sender response codes etc.

I have been told that I can do this using Apache configured as a "reverse proxy".

But I am not an expert at Apache or Tomcat and before I investigate this option I wanted to be sure I was going down the right path.

i.e.

Schematic

So to the Remote Server application everything looks like it happens over HTTPS.

And to my local Tomcat web application everything looks like it happens over HTTP.

Is this doable and correct ?

Do I need to use Apache or could I do it all in Tomcat ?

Is this what is called "url rewriting" ?

This is more than just "redirection" ?

Thanks, Brett