server configuration

<?xml version='1.0' encoding='utf-8'?>
<Server port="6500" shutdown="SHUTDOWN">

  <Listener className="org.apache.catalina.core.AprLifecycleListener" SSLEngine="on" />
  <Listener className="org.apache.catalina.core.JreMemoryLeakPreventionListener" />
  <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />


  <GlobalNamingResources>
    <Resource name="UserDatabase" auth="Container"
              type="org.apache.catalina.UserDatabase"
              description="User database that can be updated and saved"
              factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
              pathname="conf/tomcat-users.xml" />
  </GlobalNamingResources>

  <Service name="Catalina">

  <Connector port=“10443" protocol="org.apache.coyote.http11.Http11Nio2Protocol"
               sslImplementationName="org.apache.tomcat.util.net.openssl.OpenSSLImplementation"
               SSLEnabled="true"
               scheme="https"
               secure="true"
               URIEncoding="UTF-8"
               maxThreads=“**"
               maxPostSize=“****"
               maxHttpHeaderSize=“***"
               throwOnFailure="true"
               defaultSSLHostConfigName=“aa.com” >
               <SSLHostConfig honorCipherOrder="true" insecureRenegotiation="false"
                              hostName=“aa.com"
                              certificateVerification="none"
                              disableCompression="true"
                              disableSessionTickets="true"
                              ciphers="ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:!DSS"
                            >
                            <Certificate certificateKeyFile=“<path to private key>"
                                 certificateChainFile=“<path to chain>"
                                 certificateFile=“<path to certificate>"
                                 type="RSA" />
               </SSLHostConfig>
    </Connector>

    <Connector port=“11443" protocol="org.apache.coyote.http11.Http11Nio2Protocol"
               sslImplementationName="org.apache.tomcat.util.net.openssl.OpenSSLImplementation"
               SSLEnabled="true"
               scheme="https"
               secure="true"
               URIEncoding="UTF-8"
               maxThreads=“**"
               maxPostSize=“****"
               maxHttpHeaderSize=“****"
               throwOnFailure="true"
               defaultSSLHostConfigName=“aa.com" >
               <SSLHostConfig honorCipherOrder="true" insecureRenegotiation="false"
                              hostName=“aa.com"
                              certificateVerification="optional"
                              caCertificateFile=“<path to singing CA>"
                              certificateVerificationDepth="1"
                              disableCompression="true"
                              disableSessionTickets="true"
                              ciphers="ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:!DSS"
                            >
                            <Certificate certificateKeyFile=“<path to private key>"
                                 certificateChainFile=“<path to chain>"
                                 certificateFile=“<path to certificate>"
                                 type="RSA" />
               </SSLHostConfig>
    </Connector>
    <Engine name="Catalina" defaultHost="localhost">
      <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
             resourceName="UserDatabase"/>
      <Host name="localhost"  appBase="webapps"
           unpackWARs="true" autoDeploy="true"
            xmlValidation="false" xmlNamespaceAware="false">
                <Valve className="org.apache.catalina.valves.RemoteIpValve"
internalProxies="127\.0\.0\.1|10\.20\.4\.1|10\.20\.4\.2|10\.20\.4\.3"
remoteIpHeader="x-forwarded-for"
proxiesHeader="x-forwarded-by"
protocolHeader="x-forwarded-proto"
/>
<Valve className="org.apache.catalina.valves.AccessLogValve" directory=“<path to log>/logs"  prefix=“test" suffix=".txt" requestAttributesEnabled="t
rue" pattern="%h %l %u %t &quot;%r&quot; %s %b &quot;%{Referer}i&quot; &quot;%{User-Agent}i&quot; %D" resolveHosts="false"/>
      </Host>
    </Engine>
  </Service>
</Server>