I want to have a tomcat server running SSL. I have a shopping cart applet that requires some strong security. Now tomcat gives explicit instructions for implementing this, which includes using OpenSSL to generate a certificate. OpenSSL is a very robust tool-and is open source-but its written in C. Being a java programmer, I'd feel more comfortable making modifications to a java product. Are there any Java based certificate/cryptology products on the market that can be used instead? I would be nice if they were free- like OpenSSL is.