The Apache Group has a fine howto for getting SSL going. But someday you might run into a situation where Tomcat has had the default server.xml trimmed down. At that time you might start running into odd errors, like:
ERROR: tomcat5.CoyoteConnector - Coyote connector has not been started
It would behoove you at this point to ensure that the Connector configuration for your secure port is specifying the className attribute.
<connector port="443"
className="org.apache.coyote.tomcat5.CoyoteConnector"
...
/>